safebox/guacamole-client
4
0
Fork 0
mirror of https://github.com/gyurix1968/guacamole-client.git synced 2025-09-07 13:41:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

GUACAMOLE-708: Remove requirement for users to have UPDATE permission on themselves for TOTP to work.

Browse Source
This commit is contained in:
Michael Jumper
2019-02-17 20:54:40 -08:00
parent 47f7eb34b6
commit 4e8c9e1cb7
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
extensions/guacamole-auth-totp/src/main/java/org/apache/guacamole/auth/totp/user/UserVerificationService.java
View File

@@ -181,12 +181,13 @@ public class UserVerificationService {
// Update user object // Update user object
try { try {
context.getUserDirectory().update(self); context.getPrivileged().getUserDirectory().update(self);
} }
catch (GuacamoleSecurityException e) { catch (GuacamoleSecurityException e) {
logger.info("User \"{}\" cannot store their TOTP key as they " logger.info("User \"{}\" cannot store their TOTP key as they "
+ "lack permission to update their own account. TOTP " + "lack permission to update their own account and the "
+ "will be disabled for this user.", + "TOTP extension was unable to obtain privileged access. "
+ "TOTP will be disabled for this user.",
self.getIdentifier()); self.getIdentifier());
logger.debug("Permission denied to set TOTP key of user " logger.debug("Permission denied to set TOTP key of user "
+ "account.", e); + "account.", e);