New safe users shouldn't inherit new permissions

2026-07-14 10:53:05 -07:00
parent 5b6b43ac3d
commit 0394bb8cde
1 changed files with 4 additions and 0 deletions
@@ -47,6 +47,10 @@ if (!$in{'user'} && $uaccess{'rpc'} == 2) {
 	# Don't offer the confusing 'root' or 'admin' RPC option by default
 	$uaccess{'rpc'} = 0;
 	}
+if (!$in{'user'} && $safe) {
+	# Safe users should not inherit new permissions by default
+	$uaccess{'negative'} = 1;
+	}

 # Give up if readonly
 if ($user{'readonly'} && !$in{'readwrite'}) {