WindowsAuthProvider setting to restrict BUILTIN\Administrators

James Moger

2014-02-21 fa38a155cf2019c1fc7904ab47d37c0e7e558c13

 src/main/java/com/gitblit/auth/WindowsAuthProvider.java

@@ -158,10 +158,12 @@
             groupNames.add(group.getFqn());
        }

          if (settings.getBoolean(Keys.realm.windows.permitBuiltInAdministrators, true)) {
        if (groupNames.contains("BUILTIN\\Administrators")) {
           // local administrator
           user.canAdmin = true;
        }
        }

        // TODO consider mapping Windows groups to teams