disco#items of PubSub node ignores permission checking (#137)

Andrzej Wójcik (Tigase) opened 2 years ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Activities

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 2 years ago
Andrzej Wójcik (Tigase) changed state to 'In Progress' 2 years ago
Previous Value Current Value
Open

In Progress
Andrzej Wójcik (Tigase) commented 2 years ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.
Andrzej Wójcik (Tigase) changed state to 'In QA' 2 years ago
Previous Value Current Value
In Progress

In QA
Andrzej Wójcik (Tigase) commented 2 years ago

Fixed on the server side.
Wojciech Kapcia (Tigase) added to iteration "tigase-server-8.4.0" 1 year ago
Andrzej Wójcik (Tigase) changed state to 'Closed' 1 year ago
Previous Value Current Value
In QA

Closed
Login to comment

Previous Value	Current Value
Open	In Progress

Previous Value	Current Value
In Progress	In QA

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137