Project

General

Profile

Actions
Copy link

Bug #13287

closed

Granular permission check is missing on template invocation show action

Added by Marek Hulán almost 9 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Marek Hulán
Category:
-
Target version:
foreman_remote_execution 0.2.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman_remote_execution/pull/122
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

User with view_job_templates permission can access any template invocation. Since the permission is granular we should check filter conditions on job invocation object.

Actions
Copy link

Also available in: Atom PDF