[Rt-devel] insecure dependency errors with version 3.0.10 and later

[Jesse Vincent]

On Wed, May 19, 2004 at 09:24:35PM +0200, Dirk Pape wrote:
> Hello,
> 
> --Am Mittwoch, 19. Mai 2004 14:59 Uhr -0400 schrieb Jesse Vincent 
> <jesse at bestpractical.com>:
> 
> >No, but you just told us you switched from mod_perl to FastCGI. This is
> >known to be an issue with up to 3.0.10 and FastCGI.  It _Should_ be
> >better with 3.0.11. (We're running FastCGI exclusively right now)
> 
> but I have this with 3.0.11rc3 just these days and I suspect they come from 
> some local modifications in local/html (I have a web page that adds 
> current-user as CC-Watcher, and a page that creates tickets with 
> dependencies (pretasks and posttasks).
> 
> Can you point me to an example (from your corrections for 3.0.11) that 
> might hint me how to change my pages to work well?

So the change was to add a call to RT::DropSetGIDPermissions in the
fastcgi handler.

> Dirk.

--