View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0000085 | XMB1 | New Features | public | 2008-07-30 00:37 | 2008-08-07 10:48 |
Reporter | miqrogroove | Assigned To | miqrogroove | ||
Priority | high | Severity | feature | Reproducibility | N/A |
Status | closed | Resolution | fixed | ||
Target Version | 1.9.11 | Fixed in Version | 1.9.11 | ||
Summary | 0000085: [API] User Status Masquerade Within Session | ||||
Description | It is inevitable that hackers and modders, eventually even XMB devs, will need to add a feature that requires a temporary downgrade of user status. We could call this the masquerade permissions set. Example: I've created a beta version of an XML Sitemap Protocol addon for XMB. It generates a list of all the primary URLs on the board, including all posts and forums. Now there's an immediate problem with this concept. If I login as SADMIN and run the Sitemap script, that script is going to have access to posts and forums that are not part of the sitemap. I need the script to masquerade as X_GUEST when it queries the list of forums that it should have access to. With some clever coding, I believe we can make that exact feature a reality. | ||||
Tags | API | ||||
MySQL Version | |||||
PHP Version | |||||
Web Server | |||||
Browser | |||||
Flags | |||||
Original Reporter | |||||
SVN Revision | 1186 | ||||
Git Commit | |||||
Date Modified | Username | Field | Change |
---|---|---|---|
2008-07-30 00:37 | miqrogroove | New Issue | |
2008-07-30 14:39 | miqrogroove | Tag Attached: API | |
2008-08-02 01:57 | miqrogroove | SVN Revision | => 1186 |
2008-08-02 01:57 | miqrogroove | Status | new => resolved |
2008-08-02 01:57 | miqrogroove | Fixed in Version | => 1.9.11 |
2008-08-02 01:57 | miqrogroove | Resolution | open => fixed |
2008-08-02 01:57 | miqrogroove | Assigned To | => miqrogroove |
2008-08-07 10:48 | miqrogroove | Status | resolved => closed |