Package: twiki
Version: 1:4.0.5-9.1
Severity: normal
Tags: patch

Whenever using TWiki with "intranet" users/groups, user/group names containing 
"-" character will lead to bad parsing of ALLOW/DENY directives lists.

For example :

  Set ALLOWTOPICVIEW = groupone, group-two, groupthree

Here only members of groupone will be recognized.

The guilty one is a regexp in TWiki/Users.pm in expandUserList
which should be changed from :
 $names =~ s/\s*([$TWiki::regex{mixedAlphaNum}_\.\,\s\%]*)\s*(.*)/$1/go;
to:
 $names =~ s/\s*([$TWiki::regex{mixedAlphaNum}_\-\.\,\s\%]*)\s*(.*)/$1/go;

Hope this helps,

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.21-2-686
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages twiki depends on:
ii  apache2.2-common           2.2.3-4+etch3 Next generation, scalable, extenda
ii  debconf [debconf-2.0]      1.5.11etch1   Debian configuration management sy
ii  libalgorithm-diff-perl     1.19.01-2     a perl library for finding Longest
ii  libcgi-session-perl        4.14-1        Persistent session data in CGI app
ii  libdigest-sha1-perl        2.11-1        NIST SHA-1 message digest algorith
ii  liberror-perl              0.15-8        Perl module for error/exception ha
ii  libhtml-parser-perl        3.55-1        A collection of modules that parse
ii  liblocale-maketext-lexicon 0.62-1        Lexicon-handling backends for "Loc
ii  libtext-diff-perl          0.35-2        Perform diffs on files and record 
ii  liburi-perl                1.35-2        Manipulates and accesses URI strin
ii  perl [libmime-base64-perl] 5.8.8-7etch1  Larry Wall's Practical Extraction 
ii  perl-modules [libnet-perl] 5.8.8-7etch1  Core Perl modules
ii  rcs                        5.7-18        The GNU Revision Control System

twiki recommends no packages.

-- debconf information:
* twiki/samplefiles: true
* twiki/wikiwebmaster: [EMAIL PROTECTED]
* twiki/defaultUrlHost: https://picoforge.int-evry.fr/
* twiki/apacheUserCreationNote:



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to