[ZBX-10039] update IT service with API by Zabbix User Created: 2015 Nov 02 Updated: 2020 Jul 16 |
|
| Status: | Open |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | API (A) |
| Affects Version/s: | 3.0.0alpha3 |
| Fix Version/s: | None |
| Type: | Defect (Security) | Priority: | Trivial |
| Reporter: | vitalijs.cemeris (Inactive) | Assignee: | Unassigned |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | itservices, permissions, security | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Description |
|
Reproduce: Request API service.update as Zabbix User with any correct properties. NOTE: Zabbix user have no permission to configure IT service. |
| Comments |
| Comment by richlv [ 2015 Nov 02 ] |
|
similar to ZBX-6345 |
| Comment by vitalijs.cemeris (Inactive) [ 2015 Nov 02 ] |
|
(1) service.get with option filter throws error: undefined index triggerid. Note: If you are authorized as user that is not Zabbix Super Admin. api/services/CService.php:1229 |
| Comment by richlv [ 2016 Mar 25 ] |
|
on the second thought, ZBX-6345 should fix this, so probably worth closing as a duplicate |