From 7e8ff58bc2d6c2f538ec5889c32d762fabf3fbb2 Mon Sep 17 00:00:00 2001 From: alexhudson Date: Sat, 21 Aug 2010 18:56:24 +0000 Subject: [PATCH] Only pursue ACL checks for collections on/above the root guid; otherwise we spin forever. --- src/agents/store/object-model.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/agents/store/object-model.c b/src/agents/store/object-model.c index 3e63eaa..0f878a0 100644 --- a/src/agents/store/object-model.c +++ b/src/agents/store/object-model.c @@ -1746,7 +1746,7 @@ StoreObjectCheckAuthorization(StoreClient *client, StoreObject *object, int prop if (current_result == 0) { // try to inherit from the containing collection so we can check that instead - if (checkobj.collection_guid > 0) { + if (checkobj.collection_guid > STORE_ROOT_GUID) { StoreObjectFind(client, checkobj.collection_guid, &checkobj); } else { // default to deny if we have gone all the way up the tree