disco#items of PubSub node ignores permission checking (#137)

Activities

Andrzej Wójcik (Tigase) opened 12 months ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 12 months ago

Referenced from commit 12 months ago

Added permission check for retrieval PubSub node item ids using disco#items #137

Andrzej Wójcik (Tigase) committed 12 months ago

6b09c27a

Andrzej Wójcik (Tigase) changed state to 'In Progress' 12 months ago

Previous Value	Current Value
Open	In Progress

Andrzej Wójcik (Tigase) commented 12 months ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.

Andrzej Wójcik (Tigase) changed state to 'In QA' 10 months ago

Previous Value	Current Value
In Progress	In QA

Andrzej Wójcik (Tigase) commented 10 months ago

Fixed on the server side.

wojciech.kapcia@tigase.net added to iteration "tigase-server-8.4.0" 7 months ago

Andrzej Wójcik (Tigase) changed state to 'Closed' 7 months ago

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137