disco#items of PubSub node ignores permission checking (#137)

Andrzej Wójcik (Tigase) opened 1 year ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Activities

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 1 year ago
Andrzej Wójcik (Tigase) changed state to 'In Progress' 1 year ago
Previous Value Current Value
Open

In Progress
Andrzej Wójcik (Tigase) commented 1 year ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.
Andrzej Wójcik (Tigase) changed state to 'In QA' 1 year ago
Previous Value Current Value
In Progress

In QA
Andrzej Wójcik (Tigase) commented 1 year ago

Fixed on the server side.
Wojciech Kapcia (Tigase) added to iteration "tigase-server-8.4.0" 12 months ago
Andrzej Wójcik (Tigase) changed state to 'Closed' 12 months ago
Previous Value Current Value
In QA

Closed
Login to comment

Previous Value	Current Value
Open	In Progress

Previous Value	Current Value
In Progress	In QA

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137