Don't create new pad if a non-existant read-only pad is accessed

fixes #1848
This commit is contained in:
Marcel Klehr 2013-10-12 18:41:48 +02:00
parent c3a96b34bb
commit 048d55a64c
2 changed files with 18 additions and 19 deletions

View file

@ -41,6 +41,11 @@ var authLogger = log4js.getLogger("auth");
exports.checkAccess = function (padID, sessionCookie, token, password, callback)
{
var statusObject;
if(!padID) {
callback(null, {accessStatus: "deny"});
return;
}
// a valid session is required (api-only mode)
if(settings.requireSession)