From 723bdf334969d0e4b1ff1bb17ab24355ae251d44 Mon Sep 17 00:00:00 2001 From: Daniel Silverstone Date: Mon, 3 Sep 2012 20:02:24 +0100 Subject: Cannot be an admin if impersonating them, sorry --- skel/gitano-admin/rules/core.lace | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'skel') diff --git a/skel/gitano-admin/rules/core.lace b/skel/gitano-admin/rules/core.lace index c54dcba..d6b7cd4 100644 --- a/skel/gitano-admin/rules/core.lace +++ b/skel/gitano-admin/rules/core.lace @@ -5,7 +5,7 @@ default deny "The ruleset didn't provide access. Denying by default." include global:defines # Now, if we're in the admin group, we can always do stuff -allow "Administrators can do anything" is_admin +allow "Administrators can do anything" is_admin !is_asanother # Now let's decide if we can use 'as' include global:aschecks if_asanother -- cgit v1.2.1