Project

General

Profile

Bug #13287

Granular permission check is missing on template invocation show action

Added by Marek Hulán over 6 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Marek Hulán
Category:
-
Target version:
foreman_remote_execution 0.2.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman_remote_execution/pull/122
Fixed in Releases:
Found in Releases:

Description

User with view_job_templates permission can access any template invocation. Since the permission is granular we should check filter conditions on job invocation object.

Associated revisions

Revision d194bf00 (diff)
Added by Marek Hulán over 6 years ago

Fixes #13287 - add granular permission check to template invocation

Revision 485d9210
Added by Marek Hulán over 6 years ago

Merge pull request #122 from ares/fix/13287

Fixes #13287 - add granular permission check to template invocation

History

#1 Updated by The Foreman Bot over 6 years ago

  • Status changed from Assigned to Ready For Testing
  • Pull request https://github.com/theforeman/foreman_remote_execution/pull/122 added

#2 Updated by Marek Hulán over 6 years ago

  • Legacy Backlogs Release (now unused) set to 109

#3 Updated by Marek Hulán over 6 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

Also available in: Atom PDF