lumpidu/redis — Issue #2: Client authorized with fine grained authentication may not make changes to its own credentials
Author: lumpidu
Created: 2011-12-11 12:41:56+00:00
State: open

If a client is authorized and has the possibility to arbitrarily change sets, he is also able to extend/change its own privileges in adding / deleting commands from its set.

Only if a client authenticated with the server password may make changes to everything