OpenAFS Master Repository branch, openafs-stable-1_8_x, updated. openafs-stable-1_8_3-41-gd479046

[Gerrit Code Review]

The following commit has been merged in the openafs-stable-1_8_x branch:
commit d47904684afb8402b692c9f7a4bb5f32cc3da5d7
Author: Andrew Deason <adeason@sinenomine.net>
Date:   Sat Nov 3 00:58:58 2018 -0500

    ptserver: Fix AccessOK -restricted for SYSADMINID
    
    According to the documentation, as well as other code paths that check
    for -restricted, the -restricted option does not affect members of
    system:administrators. Currently, though, AccessOK only bypasses the
    -restricted check if the caller is SYSADMINID itself (i.e. localauth).
    
    Fix AccessOK to only do the -restricted checks if the caller is not in
    system:administrators, to match the documentation as well as other
    ptserver operations.
    
    Reviewed-on: https://gerrit.openafs.org/13373
    Tested-by: BuildBot <buildbot@rampaginggeek.com>
    Reviewed-by: Mark Vitale <mvitale@sinenomine.net>
    Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>
    (cherry picked from commit 3a8fa4ecd65d5d743fdc573c9f0f261aee2063b6)
    
    Change-Id: I786830efab229a50a521daf3efc624e949475030
    Reviewed-on: https://gerrit.openafs.org/13687
    Reviewed-by: Michael Meffie <mmeffie@sinenomine.net>
    Reviewed-by: Andrew Deason <adeason@sinenomine.net>
    Tested-by: Andrew Deason <adeason@sinenomine.net>
    Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>
    Reviewed-by: Stephan Wiesand <stephan.wiesand@desy.de>

 src/ptserver/ptutils.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

-- 
OpenAFS Master Repository