disco#items of PubSub node ignores permission checking (#137)

Activities

Andrzej Wójcik (Tigase) opened 1 year ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 1 year ago

Referenced from commit 1 year ago

Added permission check for retrieval PubSub node item ids using disco#items #137

Andrzej Wójcik (Tigase) committed 1 year ago

6b09c27a

Andrzej Wójcik (Tigase) changed state to 'In Progress' 1 year ago

Previous Value	Current Value
Open	In Progress

Andrzej Wójcik (Tigase) commented 1 year ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.

Andrzej Wójcik (Tigase) changed state to 'In QA' 11 months ago

Previous Value	Current Value
In Progress	In QA

Andrzej Wójcik (Tigase) commented 11 months ago

Fixed on the server side.

Wojciech Kapcia added to iteration "tigase-server-8.4.0" 8 months ago

Andrzej Wójcik (Tigase) changed state to 'Closed' 8 months ago

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137