PAWECOGmbH/saaster

reinit parameter has no visible effect without sysadmin login

Open

#712 opened on Jan 25, 2026

View on GitHub
 (0 comments) (0 reactions) (0 assignees)ColdFusion (7 forks)auto 404
enhancementgood first issue

Repository metrics

Stars
 (36 stars)
PR merge metrics
 (PR metrics pending)

Description

In Application.cfc there is a mechanism to reinitialize the application scope using the reinit URL parameter.

When using the reinit URL parameter in Application.cfc without being logged in as sysadmin, the application scope is not reinitialized and no feedback is given. This is confusing during development, because code changes in scoped functions appear to be ignored and it is not obvious that the reinit was blocked due to missing permissions.

Solution: } else if (structKeyExists(url, "reinit")) { writeOutput("Unauthorized reinit attempt by IP " & session.usersIP); structDelete(url, "reinit"); abort; }

Contributor guide

Research direction
Look at the Application.cfc file, find where the reinit parameter is checked, and add an error message output when the user is not a sysadmin.
Tech stack
None
Domain
backend
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Git
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
80