提交 321acea0 编写于 作者: A antirez

ACL: deny commands execution of disabled users.

上级 b0920e6e
......@@ -1055,6 +1055,10 @@ int ACLCheckCommandPerm(client *c, int *keyidxptr) {
/* If there is no associated user, the connection can run anything. */
if (u == NULL) return ACL_OK;
/* If the user is disabled we don't allow the execution of any
* command. */
if (!(u->flags & USER_FLAG_ENABLED)) return ACL_DENIED_CMD;
/* Check if the user can execute this command. */
if (!(u->flags & USER_FLAG_ALLCOMMANDS) &&
c->cmd->proc != authCommand)
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册