Users with read-only permissions are able to create items via API

XMLWordPrintable

    • Type: Incident report
    • Resolution: Fixed
    • Priority: Major
    • 1.8.5
    • Affects Version/s: 1.8.4
    • Component/s: API (A), Server (S)
    • None

      Users who has read-only permissions on host are able to create items on hosts. How to reproduce:

      • create new user
      • add him to group which has read-only permissions to host
      • call item.create via API on that host

            Assignee:
            Unassigned
            Reporter:
            azurIt
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: