aboutsummaryrefslogtreecommitdiff
path: root/src/Sproxy/Server/DB.hs
diff options
context:
space:
mode:
authorIgor Pashev <pashev.igor@gmail.com>2016-12-18 14:29:18 +0300
committerIgor Pashev <pashev.igor@gmail.com>2016-12-18 14:31:10 +0300
commitdcebf4705dfe974746519a37570aecd7eb4e2b2c (patch)
tree03a25d938c34ff1e280b4440478bdff631fe7c7b /src/Sproxy/Server/DB.hs
parentc80b3f7579ba01fbc37fa7237c75091167c51dbf (diff)
downloadsproxy2-dcebf4705dfe974746519a37570aecd7eb4e2b2c.tar.gz
BREAKING: no wildcards for domain names
This feature was ambiguous (in the same way as paths are) and never used anyway.
Diffstat (limited to 'src/Sproxy/Server/DB.hs')
-rw-r--r--src/Sproxy/Server/DB.hs4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/Sproxy/Server/DB.hs b/src/Sproxy/Server/DB.hs
index 984d229..34d6109 100644
--- a/src/Sproxy/Server/DB.hs
+++ b/src/Sproxy/Server/DB.hs
@@ -66,10 +66,10 @@ userGroups db email domain path method =
withResource db $ \c -> fmap SQLite.fromOnly <$> SQLite.queryNamed c [q|
SELECT gm."group" FROM group_privilege gp JOIN group_member gm ON gm."group" = gp."group"
WHERE :email LIKE gm.email
- AND :domain LIKE gp.domain
+ AND gp.domain = :domain
AND gp.privilege IN (
SELECT privilege FROM privilege_rule
- WHERE :domain LIKE domain
+ WHERE domain = domain
AND :path LIKE path
AND method = :method
ORDER BY length(path) - length(replace(path, '/', '')) DESC LIMIT 1