Project

General

Profile

« Previous | Next » 

Revision 3b0b7cb4

Added by Marek Hulán over 10 years ago

fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)

View differences:

app/controllers/api/v1/compute_resources_controller.rb
process_response @compute_resource.destroy
end
def resource_scope
resource_class.my_compute_resources
end
end
end
end

Also available in: Unified diff