Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hqa4m-0006Fj-8J for pgadmin-hackers@arkaria.postgresql.org; Thu, 25 Jul 2019 09:30:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hqa4e-0008Pf-6k for pgadmin-hackers@arkaria.postgresql.org; Thu, 25 Jul 2019 09:30:08 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hqZym-0006Nj-UF for pgadmin-hackers@lists.postgresql.org; Thu, 25 Jul 2019 09:24:04 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hqZyS-00079w-LF for pgadmin-hackers@lists.postgresql.org; Thu, 25 Jul 2019 09:24:04 +0000 Received: from gothos.postgresql.org ([2620:122:b000:7::243]) by mahout.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hqZyP-0003WA-NC for pgadmin-hackers@lists.postgresql.org; Thu, 25 Jul 2019 09:23:41 +0000 Received: from localhost ([127.0.0.1] helo=gothos.postgresql.org) by gothos.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hqZy2-0005bj-9f for pgadmin-hackers@lists.postgresql.org; Thu, 25 Jul 2019 09:23:18 +0000 Content-Type: multipart/mixed; boundary="===============4731822637869629757==" MIME-Version: 1.0 From: Dave Page To: pgadmin-hackers@lists.postgresql.org Subject: pgAdmin 4 commit: Validate permissions on the session directory itself, Message-Id: Date: Thu, 25 Jul 2019 09:23:18 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --===============4731822637869629757== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VmFsaWRhdGUgcGVybWlzc2lvbnMgb24gdGhlIHNlc3Npb24gZGlyZWN0b3J5IGl0c2VsZiwgbm90 IGl0J3MgcGFyZW50LCBwZXIgRmVsaXggUHVzY2guIEZpeGVzICM0Mjc2CgpCcmFuY2gKLS0tLS0t CmVsZWN0cm9uMgoKRGV0YWlscwotLS0tLS0tCmh0dHBzOi8vZ2l0LnBvc3RncmVzcWwub3JnL2dp dHdlYj9wPXBnYWRtaW40LmdpdDthPWNvbW1pdGRpZmY7aD1lNGZjNDJmNDdhZTlkNmVkOGQxZWY5 ZDczNTBkNjZiMjNmMDkxYTk0CgpNb2RpZmllZCBGaWxlcwotLS0tLS0tLS0tLS0tLQp3ZWIvcGdh ZG1pbi9zZXR1cC9kYXRhX2RpcmVjdG9yeS5weSAgICAgICAgIHwgMiArLQp3ZWIvcGdhZG1pbi9z ZXR1cC90ZXN0cy90ZXN0X3Blcm1pc3Npb25zLnB5IHwgMiArLQoyIGZpbGVzIGNoYW5nZWQsIDIg aW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKCg== --===============4731822637869629757==--