Skip to content

/ graylog2-server

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Check for user permission before delete input resource #4858

Closed
1Jesper1 opened this issue Jun 22, 2018 · 0 comments
Closed

Check for user permission before delete input resource #4858

1Jesper1 opened this issue Jun 22, 2018 · 0 comments
Assignees
@dennisoelkers
Labels
blocker bug security triaged
Milestone
2.4.6

Comments

@1Jesper1
Copy link

@1Jesper1 1Jesper1 commented Jun 22, 2018

graylog2-server/graylog2-server/src/main/java/org/graylog2/rest/resources/system/inputs/InputsResource.java

Line 161 in 365d26f

inputService.destroy(input);

@dennisoelkers dennisoelkers modified the milestones: 3.0.0, 2.4.6 Jun 25, 2018
@dennisoelkers dennisoelkers self-assigned this Jun 25, 2018
dennisoelkers added a commit that referenced this issue Jun 26, 2018
@dennisoelkers
Check for permission before terminating input.
Verified
This commit was signed with a verified signature.
dennisoelkers Dennis Oelkers
GPG key ID: 440E58BD30A068C8 Learn about signing commits
Loading status checks…
e703dae 
Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.
@dennisoelkers dennisoelkers mentioned this issue Jun 26, 2018
Merged
3 of 9 tasks complete
@bernd bernd closed this in #4867 Jun 28, 2018
bernd added a commit that referenced this issue Jun 28, 2018
@dennisoelkers @bernd
Check for permission before terminating input. (#4867)
Loading status checks…
0582e31 
Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.
bernd added a commit that referenced this issue Jun 28, 2018
@dennisoelkers @bernd
Check for permission before terminating input. (#4867)
Loading status checks…
76ec688 
Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

(cherry picked from commit 0582e31)
@bernd bernd mentioned this issue Jun 28, 2018
Merged
dennisoelkers added a commit that referenced this issue Jun 28, 2018
@bernd @dennisoelkers
Check for permission before terminating input. (#4867) (#4874)
Loading status checks…
9618d75 
Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

(cherry picked from commit 0582e31)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dennisoelkers dennisoelkers

Labels
blocker bug security triaged
Projects
None yet
Milestone
2.4.6
Linked pull requests

Successfully merging a pull request may close this issue.

Check for permission before terminating input.
2 participants
@dennisoelkers @1Jesper1