Actions
Bug #24961
closedHost API all_parameters wrong permission authorization check
Status:
Closed
Priority:
Normal
Assignee:
Category:
Users, Roles and Permissions
Target version:
-
Description
We check this:
node do |host| { :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized) } end
This makes no sense, must be:
node do |host| { :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized(:view_params)) } end
Actions