RandomWireTechnologies / ctrl-o-node

This is the python code that runs on the Ctrl-O Nodes
Artistic License 2.0
6 stars 3 forks source link

Node Based Access Control Broken #9

Open pataelmo opened 9 years ago

pataelmo commented 9 years ago

I discovered that the door/node based access control restrictions were not working properly. If you give access to one person to one door, it actually will give them access to all doors.

This is due to the fact that the SQL in database.py:221 does not include a where statement to limit the access search to this particular node. Should just need "node_id=? AND" to the where statement to make the search more accurate.