search

nyquil93 / crunchy

Automatically exported from code.google.com/p/crunchy
0 stars 0 forks source link

External execution should be disabled for non-admins #210

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Create an account without administrator rights
2. Go to a page that launch an external process
3. Launch that process...

A non-admin account is thought to be intended, say, for a student accessing
Crunchy from a browser running on a different computer (i.e. the classroom
server) than their own.  If an external application is launched by Crunchy,
it will be launched on the server and the student will not see it.

Original issue reported on code.google.com by andre.ro...@gmail.com on 13 Aug 2009 at 11:30

GoogleCodeExporter commented 8 years ago

Original comment by andre.ro...@gmail.com on 14 Aug 2009 at 12:21

GoogleCodeExporter commented 8 years ago 
GUI based programs can be launched via a thread - i.e. not only as external 
process.
 They would suffer from the same problem and it is impossible to prevent them from
happening.  This is a limitation of Crunchy running from a single server and 
there's
nothing that can be done to change this.

This issue is thus invalid.

Original comment by andre.ro...@gmail.com on 15 Aug 2009 at 12:44