Patch: 1.4.2 events.php permission expansion bug

[WO-Jacob]

Not sure what you want in here...

I don't know the full extent of the bug, but it looks like any user could go to 'events.php' and see any events triggered for any host. Not good.

Also, it was shoing the groups the host belonged to and not the groups the user was allowed to access.

[azurit]

other patches

i didn't read you patch so i'm not sure if i'm right but i was trying to fix the same problem, patches are here (diffs at the end):

http://www.zabbix.com/forum/showthread.php?t=7218

they are for 1.4.1

[Alexei]

The problem is fixed in the latest code. Thank you!