You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Expected Behavior:
Users should only be able to see and execute tasks on the executors they are assigned to.
Ordinary users should not be able to see or execute tasks on executors they are not assigned to.
Actual Behavior:
In version 2.4.1, even though an ordinary user is not assigned to executor B, they can still indirectly execute tasks on executor B by creating a task on executor A and using the sub-task ID (which is a task from executor B).
Steps to Reproduce the Behavior:
Ensure the version of XXL-JOB is 2.4.1 or lower.
Create two executors, labeled as A and B.
Create an ordinary user and assign executor A to this user.
Use the administrator account to create a task on executor B, note the task ID as 2.
Log in with the ordinary user account and confirm that executor B and the task with ID 2 are not visible.
Create a new task on executor A and add the sub-task ID in the advanced configuration, set it to 2.
Execute the task created by the ordinary user on executor A and observe that the task with ID 2 on executor B is also executed
The text was updated successfully, but these errors were encountered:
XXL-JOB Version: 2.4.1
Expected Behavior:
Users should only be able to see and execute tasks on the executors they are assigned to.
Ordinary users should not be able to see or execute tasks on executors they are not assigned to.
Actual Behavior:
In version 2.4.1, even though an ordinary user is not assigned to executor B, they can still indirectly execute tasks on executor B by creating a task on executor A and using the sub-task ID (which is a task from executor B).
Steps to Reproduce the Behavior:
The text was updated successfully, but these errors were encountered: