mirror of
https://github.com/ether/etherpad-lite.git
synced 2025-04-21 16:06:16 -04:00
![]() There's no need to perform an authentication check in the socket.io middleware because `PadMessageHandler.handleMessage` calls `SecurityMananger.checkAccess` and that now performs authentication and authorization checks. This change also improves the user experience: Before, access denials caused socket.io error events in the client, which `pad.js` mostly ignores (the user doesn't see anything). Now a deny message is sent back to the client, which causes `pad.js` to display an obvious permission denied message. This also fixes a minor bug: `settings.loadTest` is supposed to bypass authentication and authorization checks, but they weren't bypassed because `SecurityManager.checkAccess` did not check `settings.loadTest`. |
||
---|---|---|
.. | ||
API.js | ||
AuthorManager.js | ||
DB.js | ||
GroupManager.js | ||
Pad.js | ||
PadManager.js | ||
ReadOnlyManager.js | ||
SecurityManager.js | ||
SessionManager.js | ||
SessionStore.js |