Github user sebbASF commented on the issue:

    https://github.com/apache/incubator-ponymail/issues/140
  
    The getRights() function is passed an account structure generated by 
user.lua.
    The usr parameter therefore has the form:
    ```
    {
        "credentials" : {
          "altemail" : { },
          "uid" : "abd",
          "fullname" : "Joe Bloggs",
          "email" : "[email protected]",
        },
        "internal" : {
          "oauth_used" : "localhost",
          "cookie" : "xxx",
          "ip" : "172.17.0.1",
          "admin" : "true"
        },
        "cid" : "abcd"
    }
    ```
    
    However the code directly accesses usr.uid, usr.email and usr.admin.
    Also the code accesses the global oauth_domain which is presumably meant to 
be internal.oauth_used.
    
    This is very confusing for any wishing to use the module as a basis for 
their own implementation.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

Reply via email to