disco#items of PubSub node ignores permission checking (#137)

Activities

Andrzej Wójcik (Tigase) opened 11 months ago

disco#items of PubSub node ignores permission checking and returns list of PubSub items ids even to entities that are not allowed to retrieve PubSub items from that node.

Andrzej Wójcik (Tigase) added "Related" tygrys/tygrys-admin#246 11 months ago

Referenced from commit 11 months ago

Added permission check for retrieval PubSub node item ids using disco#items #137

Andrzej Wójcik (Tigase) committed 11 months ago

6b09c27a

Andrzej Wójcik (Tigase) changed state to 'In Progress' 11 months ago

Previous Value	Current Value
Open	In Progress

Andrzej Wójcik (Tigase) commented 11 months ago

I've added permission checking code to ensure that only entity having permission to retrieve items of a PubSub node can actually fetch node item ids using disco#items.

Andrzej Wójcik (Tigase) changed state to 'In QA' 9 months ago

Previous Value	Current Value
In Progress	In QA

Andrzej Wójcik (Tigase) commented 9 months ago

Fixed on the server side.

wojciech.kapcia@tigase.net added to iteration "tigase-server-8.4.0" 6 months ago

Andrzej Wójcik (Tigase) changed state to 'Closed' 6 months ago

Previous Value	Current Value
In QA	Closed

Type	Bug
Priority	Normal
Assignee	Andrzej Wójcik (Tigase)
Version	5.2.0
Server Version	8.4.0
Target Release	1.1
Sprints	n/a
Customer	n/a

Iterations

tigase-server-8.4.0 Closed

tygrys/tygrys-admin#246 You are not authorized to access this issue

Issue Votes (0)

Watchers (3)

Reference

tigase/_server/tigase-pubsub#137