summaryrefslogtreecommitdiffstats
path: root/etc/inc/auth.inc
diff options
context:
space:
mode:
Diffstat (limited to 'etc/inc/auth.inc')
-rw-r--r--etc/inc/auth.inc5
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index 33fc3ad..7da3057 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -287,12 +287,13 @@ function local_user_set(& $user) {
$lock_account = false;
/* configure shell type */
+ /* Cases here should be ordered by most privileged to least privileged. */
if (userHasPrivilege($user, "user-shell-access") || userHasPrivilege($user, "page-all")) {
$user_shell = "/bin/tcsh";
- } elseif (userHasPrivilege($user, "user-ssh-tunnel")) {
- $user_shell = "/usr/local/sbin/ssh_tunnel_shell";
} elseif (userHasPrivilege($user, "user-copy-files")) {
$user_shell = "/usr/local/bin/scponly";
+ } elseif (userHasPrivilege($user, "user-ssh-tunnel")) {
+ $user_shell = "/usr/local/sbin/ssh_tunnel_shell";
} else {
$user_shell = "/sbin/nologin";
$lock_account = true;
OpenPOWER on IntegriCloud