Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FIX] CAS users can take control of Rocket.Chat accounts #15346

Merged
merged 3 commits into from
Sep 18, 2019

Conversation

pierre-lehnen-rc
Copy link
Contributor

Added a new setting to determine if the server should trust the usernames on CAS users and grant access to any user with the same username on Rocket.Chat. Turned off by default.

@CLAassistant
Copy link

CLAassistant commented Sep 11, 2019

CLA assistant check
All committers have signed the CLA.

@pierre-lehnen-rc pierre-lehnen-rc added this to the 2.1.0 milestone Sep 11, 2019
@sampaiodiego sampaiodiego merged commit 078d13e into develop Sep 18, 2019
@sampaiodiego sampaiodiego deleted the fix.cas-dont-trust-usernames-by-default branch September 18, 2019 22:44
@sampaiodiego sampaiodiego mentioned this pull request Sep 27, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants