Granular permission check is missing on template invocation show action
User with view_job_templates permission can access any template invocation. Since the permission is granular we should check filter conditions on job invocation object.
#3 Updated by Marek Hulán over 6 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset foreman_plugin|d194bf001365113f35a960b15ef477f38e52ddcd.