X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-web.git/blobdiff_plain/76795a17c522fbaeeba395c9898ab1399e315a7d..0478dcd4e3b9cac8a8dac99392be35d74c29582f:/code/validation.py

diff --git a/code/validation.py b/code/validation.py
index 480d007..0285044 100644
--- a/code/validation.py
+++ b/code/validation.py
@@ -241,6 +241,8 @@ def testOwner(user, owner, machine=None):
         return machine.owner
     if owner is None:
         raise InvalidInput('owner', owner, "Owner must be specified")
+    if '@' in owner:
+        raise InvalidInput('owner', owner, "No cross-realm Hesiod lockers allowed")
     try:
         if user not in cache_acls.expandLocker(owner):
             raise InvalidInput('owner', owner, 'You do not have access to the '