Project

General

Profile

Actions

Bug #24961

closed

Host API all_parameters wrong permission authorization check

Added by Lukas Zapletal over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Category:
Users, Roles and Permissions
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

We check this:

  node do |host|
    { :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized) }
  end

This makes no sense, must be:

  node do |host|
    { :parameters => partial("api/v2/parameters/index", :object => host.host_parameters.authorized(:view_params)) }
  end
Actions

Also available in: Atom PDF