disco#items of PubSub node ignores permission checking (#137)

Closed

Activities

Andrzej Wójcik (Tigase) opened 8 months ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 8 months ago

Referenced from commit 8 months ago

Added permission check for retrieval PubSub node item ids using disco#items #137

Andrzej Wójcik (Tigase) committed 8 months ago

6b09c27a

Andrzej Wójcik (Tigase) changed state to 'In Progress' 8 months ago

Previous Value	Current Value
Open	In Progress

Andrzej Wójcik (Tigase) commented 8 months ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.

Andrzej Wójcik (Tigase) changed state to 'In QA' 6 months ago

Previous Value	Current Value
In Progress	In QA

Andrzej Wójcik (Tigase) commented 6 months ago

Fixed on the server side.

wojciech.kapcia@tigase.net added to iteration "tigase-server-8.4.0" 4 months ago

Andrzej Wójcik (Tigase) changed state to 'Closed' 4 months ago

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

tygrys/tygrys-admin#246 You are not authorized to access this issue

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137