git merge --no-ff jonremy-patch-1

Author: BertrandGouny

CHANGELOG.md

@@ -6,12 +6,16 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [1.2.2] - Unreleased
 ### Added
-  - Add environment variable LDAP_NOFILE to setup a custom ulimit value #237
+  - Environment variable LDAP_NOFILE to setup a custom ulimit value #237
+  
 ### Fixed
   - Remove schema ambiguity #204
   - lidf typo in readme #217
   - Ignore all the folders started with . #232
 
+### Security 
+  - Fix self-edit security issue #239
+
 ## [1.2.1] - 2018-05-14
 ### Security
   - The default "write" access to "*" by  "self" in the file  "config/bootstrap/ldif/02-security.ldif" allowed anyone to change all the data about himself. This includes the gid and uid numbers what could lead to serious security issues.