Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-1718

CountOutput ignores permissions in several APIs

    XMLWordPrintable

    Details

      Description

      In several APIs permissions can only be checked by retrieving the object and then filtering them on the PHP side. Since countOutput returns the data right after it is retrieved from the DB, permissions for such requests are not checked.

      The following APIs are affected by this problem:

      • action
      • map
      • screen

      This should be fixed using the code added in ZBX-6407.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            jelisejev Pavels Jelisejevs (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated: