From ae1b7a3a9531d8be10de6e0ea9c79230fc7afb9c Mon Sep 17 00:00:00 2001 From: Art Cancro Date: Tue, 7 Sep 2010 16:01:29 -0400 Subject: [PATCH] cmd_invt_kick() is normally permitted when the room namespace matches the user number because it means the user owns the room. Disable this when the namespace happens to be 0. --- citadel/user_ops.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/citadel/user_ops.c b/citadel/user_ops.c index d68d3345b..989ce41b9 100644 --- a/citadel/user_ops.c +++ b/citadel/user_ops.c @@ -1557,8 +1557,9 @@ void cmd_invt_kick(char *iuser, int op) { * These commands are only allowed by aides, room aides, * and room namespace owners */ - if (is_room_aide() - || (atol(CC->room.QRname) == CC->user.usernum) ) { + if (is_room_aide()) { + /* access granted */ + } else if ( ((atol(CC->room.QRname) == CC->user.usernum) ) && (CC->user.usernum != 0) ) { /* access granted */ } else { /* access denied */ -- 2.30.2