0f1212feb9e1f8555818896ea8125746351d9c64,htroot/IndexMonitor.java,IndexMonitor,respond,#httpHeader#serverObjects#serverSwitch#,56
Before Change
(post.containsKey("clearlist")) ||
(post.containsKey("deleteentry"))) {
String authorization = ((String) header.get("Authorization", "xxxxxx")).trim().substring(6);
userDB.Entry entry = switchboard.userDB.proxyAuth(authorization);
if (authorization.length() == 0) {
// force log-in
prop.put("AUTHENTICATE", "admin log-in");
return prop;
}
String adminAccountBase64MD5 = switchboard.getConfig("adminAccountBase64MD5", "");
boolean authenticated = (adminAccountBase64MD5.equals(serverCodings.encodeMD5Hex(authorization)));
if (!authenticated && !entry.hasAdminRight()) {
// force log-in (again, because wrong password was given)
prop.put("AUTHENTICATE", "admin log-in");
return prop;
After Change
// force log-in
prop.put("AUTHENTICATE", "admin log-in");
return prop;
}else if (switchboard.userDB.hasAdminRight(authorization)) {
// force log-in (again, because wrong password was given)
prop.put("AUTHENTICATE", "admin log-in");
return prop;