[Tickets #3105] NEW: Horde 3.0.7 and Group-Hooks infinite loop

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=3105
-----------------------------------------------------------------------
 Ticket             | 3105
 Created By         | Thibault.LeMeur at supelec.fr
 Summary            | Horde 3.0.7 and Group-Hooks infinite loop
 Queue              | Horde Framework Packages
 Version            | FRAMEWORK_3
 State              | Unconfirmed
 Priority           | 2. Medium
 Type               | Bug
 Owners             | 
+New Attachment     | Group_hooks.patch.txt
-----------------------------------------------------------------------


Thibault.LeMeur at supelec.fr (2005-12-08 01:14) wrote:

Problem occurs when using Horde 3.0.7 with group-hooks enabled
($conf['group']['driver'] = 'hooks').

Only one group is defined and used in the permission system to give some
users access to Ingo.

If a user is not in the "acces_ingo" group (provisionned with the custom
function (_group_hook_acces_ingo in config/hooks.php), then Horde enters an
infinite loop in its search for the user group memberships:
* Group:userIsInGroup calls Group_Hooks:getGroupMemberships
* Group_Hooks:getGroupMemberships calls Group:userIsInGroup

We have found that a patch can be apply against the
"lib/Horde/Group/hooks.php" file:
* Avoid the infinite loop by replacing 2 calls of Group:userIsInGroup by 2
calls of our custom group_hook function (since it is executed only if
hashook($group) is true)
* Replace the call of the non existent "getGroupParentList" method by the
call of the defined "getGroupParents" method instead

Please find attached the "# diff -u hooks.php hooks-patched.php" output.