From: Paweł Chmielowski <pchmielowski@process-one.net>
Date: Mon, 30 May 2016 21:03:38 +0000 (+0200)
Subject: More strict check for commands with policy user
X-Git-Tag: 16.06~67
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=fc2b7018cc068ffb3f91961a41078abc3ba0bddd;p=ejabberd

More strict check for commands with policy user
---

diff --git a/src/ejabberd_commands.erl b/src/ejabberd_commands.erl
index 543e27ca1..1b7d777e6 100644
--- a/src/ejabberd_commands.erl
+++ b/src/ejabberd_commands.erl
@@ -656,7 +656,12 @@ check_access(Command, Access, Auth, CallerInfo)
 	{ok, User, Server} ->
 	    check_access2(Access, CallerInfo#{usr => jid:split(jid:make(User, Server, <<>>))}, Server);
 	no_auth_provided ->
-	    check_access2(Access, CallerInfo, global);
+	    case Command#ejabberd_commands.policy of
+		user ->
+		    false;
+		_ ->
+		    check_access2(Access, CallerInfo, global)
+	    end;
 	_ ->
 	    false
     end;