One more path permission increase for admins under remote_user.

This commit is contained in:
Dannon Baker
2015-01-26 10:43:02 -05:00
parent 61a798a1db
commit 863d5d1720
@@ -116,6 +116,8 @@ class RemoteUser( object ):
pass # Admin users may be impersonating, allow logout.
elif path_info.startswith( '/user/manage_user_info' ) and environ[ self.remote_user_header ] in self.admin_users:
pass # Admin users need to be able to change user information
elif path_info.startswith( '/user/edit_info' ) and environ[ self.remote_user_header ] in self.admin_users:
pass # Admin users need to be able to change user information
elif path_info.startswith( '/user/api_keys' ):
pass # api keys can be managed when remote_user is in use
elif path_info.startswith( '/user/edit_username' ):