Actions
Bug #24961
closed
Host API all_parameters wrong permission authorization check
Status:
Closed
Priority:
Normal
Assignee:
Category:
Users, Roles and Permissions
Target version:
-
Description
We check this:
node do |host|
{ :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized) }
end
This makes no sense, must be:
node do |host|
{ :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized(:view_params)) }
end
Updated by The Foreman Bot over 5 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman/pull/6076 added
Updated by Anonymous
Updated by Lukas Zapletal over 5 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset b62833ab1b798aac3770644d6fb87f5f4e26cfdf.
Actions