Tickets :: Comment on [#8475] Skipping login tasks not working as expected

* Your Email Address
* Spam protection	Enter the letters below: .___..__ . ,\ /. . \| [__) \./ >< \|\/\| \| \| \ \| / \\| \|
Comment	>> I'm not sure, I'm getting this now: > > > > This has nothing to do with logintasks - it has to do with you being > an admin. In Horde_Registry::pushApp(), if you are an admin the line: > > $checkPerms && $this->hasPermission($app, PERMS_READ) > > will always return true, and the code in hasPermission() will never > call isAuthenticated() to setup the session. The isAuthenticated() > check must occur before the session is created in any application > handling authentication. > > > > I think there are 2 problems with the logic in hasPermission(): > > 1.) Being a horde admin does not automatically give you 'permission' > to access it. You need valid authentication to that auth also. > > 2.) Applications that require authentication by definition will > never allow guest access. > > > > So try my commit to Registry.php in hordegit - it seems to fix things for me.
Attachment
Watch this ticket