From fc2b7018cc068ffb3f91961a41078abc3ba0bddd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Chmielowski?= <pchmielowski@process-one.net>
Date: Mon, 30 May 2016 23:03:38 +0200
Subject: [PATCH] More strict check for commands with policy user

---
 src/ejabberd_commands.erl | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/ejabberd_commands.erl b/src/ejabberd_commands.erl
index 543e27ca1..1b7d777e6 100644
--- a/src/ejabberd_commands.erl
+++ b/src/ejabberd_commands.erl
@@ -656,7 +656,12 @@ check_access(Command, Access, Auth, CallerInfo)
 	{ok, User, Server} ->
 	    check_access2(Access, CallerInfo#{usr => jid:split(jid:make(User, Server, <<>>))}, Server);
 	no_auth_provided ->
-	    check_access2(Access, CallerInfo, global);
+	    case Command#ejabberd_commands.policy of
+		user ->
+		    false;
+		_ ->
+		    check_access2(Access, CallerInfo, global)
+	    end;
 	_ ->
 	    false
     end;