Schema change - Work study

0 views
Skip to first unread message

David Burke

unread,
Mar 17, 2012, 2:42:42 PM3/17/12
to student-worker-rela...@googlegroups.com
alter table work_study_workteam_login change column user_id workteamuser_id int;

This and revision 03d3edc502be fixes a potential security issue where work study users can escalate privileges. I'm deploying on production sites now.

David Burke

unread,
Mar 17, 2012, 2:49:24 PM3/17/12
to student-worker-rela...@googlegroups.com
Also I should state clearly this requires manual cleanup of work study user permissions. Work Study users should probably have edit user (or superuser) privileged revoked. Then add Can add/change/delete work team user perms. 

But for schools who only use work study it probably doesn't matter. 
Reply all
Reply to author
Forward
0 new messages