New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check for user permission before delete input resource #4858

Closed

1Jesper1 opened this Issue Jun 22, 2018 · 0 comments

1Jesper1 commented Jun 22, 2018

graylog2-server/graylog2-server/src/main/java/org/graylog2/rest/resources/system/inputs/InputsResource.java

Line 161 in 365d26f

inputService.destroy(input);

dennisoelkers added bug security blocker triaged labels Jun 25, 2018

dennisoelkers modified the milestones: 3.0.0, 2.4.6 Jun 25, 2018

dennisoelkers self-assigned this Jun 25, 2018

dennisoelkers added a commit that referenced this issue Jun 26, 2018


      Check for permission before terminating input.

Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

e703dae

dennisoelkers referenced this issue Jun 26, 2018

Merged

Check for permission before terminating input. #4867

3 of 9 tasks complete

bernd closed this in #4867 Jun 28, 2018

bernd added a commit that referenced this issue Jun 28, 2018


      Check for permission before terminating input. (#4867)

Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

0582e31

bernd added a commit that referenced this issue Jun 28, 2018


      Check for permission before terminating input. (#4867)

Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

(cherry picked from commit 0582e31)

76ec688

bernd referenced this issue Jun 28, 2018

Merged

Check for permission before terminating input. #4874

dennisoelkers added a commit that referenced this issue Jun 28, 2018


      Check for permission before terminating input. (#4867) (#4874)

Before this change it was possible to terminate any input for every
authenticated user. This change introduces a check for the
`inputs:terminate:<input id>` permission before terminating an input.

Fixes #4858.

(cherry picked from commit 0582e31)

9618d75

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

You can’t perform that action at this time.