Differences From Artifact [09af50b15b]:

• File src/capabilities.c — part of check-in [63581ec8ba] at 2019-09-04 22:46:48 on branch trunk — Removed 'x' from the string of caps reported for Admin and Setup users in capability_expand(), which is used within the SQLite extension function fullcaps(), which among other things affects the output of /setup_ucap_list. We were still reporting that Admin and Setup users have Private capability despite [bcdc4c55]. (user: wyoung size: 12925) [more...]

To Artifact [76ed4eb5d5]:

• File src/capabilities.c — part of check-in [b833df21f7] at 2020-01-28 15:33:15 on branch trunk — In the capability summary matrix (shown on the Security Audit page, for example) do not attribute "anonymous" capabilities to user "nobody". (user: drh size: 13001)

360
361
362
363
364
365
366

367
368
369
370
371
372
373
374

** against the various user categories.
*/
void capability_summary(void){
  Stmt q;
  db_prepare(&q,
    "WITH t(id,seq) AS (VALUES('nobody',1),('anonymous',2),('reader',3),"
                       "('developer',4))"

    " SELECT id, fullcap(user.cap),seq,1"
    "   FROM t LEFT JOIN user ON t.id=user.login"
    " UNION ALL"
    " SELECT 'New User Default', fullcap(%Q), 10, 1"
    " UNION ALL"
    " SELECT 'Regular User', fullcap(capunion(cap)), 20, count(*) FROM user"
    " WHERE cap NOT GLOB '*[as]*' AND login NOT IN (SELECT id FROM t)"
    " UNION ALL"

>
|

360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375

** against the various user categories.
*/
void capability_summary(void){
  Stmt q;
  db_prepare(&q,
    "WITH t(id,seq) AS (VALUES('nobody',1),('anonymous',2),('reader',3),"
                       "('developer',4))"
    " SELECT id, CASE WHEN user.login='nobody' THEN user.cap"
                    " ELSE fullcap(user.cap) END,seq,1"
    "   FROM t LEFT JOIN user ON t.id=user.login"
    " UNION ALL"
    " SELECT 'New User Default', fullcap(%Q), 10, 1"
    " UNION ALL"
    " SELECT 'Regular User', fullcap(capunion(cap)), 20, count(*) FROM user"
    " WHERE cap NOT GLOB '*[as]*' AND login NOT IN (SELECT id FROM t)"
    " UNION ALL"