Index: openacs-4/packages/dotlrn/tcl/apm-callback-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/dotlrn/tcl/apm-callback-procs.tcl,v diff -u -r1.1.2.4 -r1.1.2.5 --- openacs-4/packages/dotlrn/tcl/apm-callback-procs.tcl 22 Oct 2004 19:31:23 -0000 1.1.2.4 +++ openacs-4/packages/dotlrn/tcl/apm-callback-procs.tcl 6 Feb 2006 20:08:43 -0000 1.1.2.5 @@ -137,8 +137,17 @@ } } } + 2.1.3 2.1.4a1 { + # This fixes a security hole opened up when cloning + # communities/classes + db_foreach get_communities_with_inherit { + select community_id + from dotlrn_communities_all c, acs_objects o + where c.community_id = o.object_id + and o.security_inherit_p = 't' + } { + permission::set_not_inherit -object_id $community_id + } } -} - - - + } +} \ No newline at end of file