Require mere mortals to specify at least one of the arguments to get_host.

diff --git a/server/qaccess.pc b/server/qaccess.pc
index 036643119e312e94ea2ab57ce8320c4fc89f64c3..2f3c7a83e76e352a72be8eed68dc115026b57921 100644 (file)
--- a/server/qaccess.pc
+++ b/server/qaccess.pc
@@ -361,7 +361,11 @@ int access_host(q, argv, cl)
          WHERE s.snet_id=:id;
        mid =0;
     } else if (q->type == RETRIEVE) {
-       return(MR_SUCCESS);
+       if (strcmp(argv[0], "*") || strcmp(argv[1], "*") ||
+           strcmp(argv[2], "*") || strcmp(argv[3], "*"))
+           return(MR_SUCCESS);
+       else
+           return(MR_PERM);
     } else {
        id = *(int *)argv[0];
        EXEC SQL SELECT m.owner_type, m.owner_id, s.owner_type, s.owner_id