]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dae302d) | patch
BUG/MEDIUM: mworker/cli: fix user and operator permission via @@<pid> in master CLI
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 4 May 2026 16:35:46 +0000 (18:35 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 4 May 2026 17:03:48 +0000 (19:03 +0200)
commit946921c199802b673acfe5fdeac19854c85e5c0f
tree755bc3689455c47ba4eb511bcb22dd26770bbe54tree | snapshot
parentdae302d479816c7d23c78c125a346245082e0852commit | diff
BUG/MEDIUM: mworker/cli: fix user and operator permission via @@<pid> in master CLI

When @@<pid> is matched in pcli_parse_request(), no "operator -" or
"user -" is being sent before the command, like it's done for @<pid>.

It leads to privileges not being respected and commands are sent as
admin.

Fix this by applying the access-level downgrade in the @@<pid> path,
like it's done for @<pid>.

Must be backported to 3.2.

Reported-by: Omkhar Arasaratnam <omkhar@linkedin.com>
src/cli.c diff | blob | history
haproxy upstream