Project

General

Profile

« Previous | Next » 

Revision ce13ab5d

Added by Marek Hulán over 10 years ago

fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)

View differences:

test/functional/organizations_controller_test.rb
test "should assign all hosts with no organization to selected organization and add taxable_taxonomies" do
organization = taxonomies(:organization1)
assert_difference "organization.taxable_taxonomies.count", 14 do
assert_difference "organization.taxable_taxonomies.count", 15 do
post :assign_all_hosts, {:id => organization.id}, set_session_user
end
end

Also available in: Unified diff