set_critpath() in 0.5.1 allows anyone to use set_critpath(). Close that hole with this patch (applied to fedora-packagedb-devel, -stable, and 0.5.x) Pushed to app and bapp servers.
patch to fix critpath auth pkgdb-critpath-fix.patch
We are using 0.5.4 now and no longer apply this. Closing.
Do reopen if I missed something here.
Login to comment on this ticket.