[VCL-250] authentication for XML RPC X-User doesn't properly check to see if no authtype was found

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0
• Fix Version/s: 2.2
• Component/s: web gui (frontend)
• Assignee: Josh Thompson
• Reporter: Josh Thompson
• Created: 21/Oct/09 16:17
• Updated: 12/Apr/10 14:03
• Resolved: 12/Apr/10 14:03

Description

in checkAccess, just after elseif($apiver == 2), there is a foreach loop to set $authtype that could finish without setting it. There is a commented out check for that case that needs to be uncommented and updated.