[ZBX-10150] screen.get API method with "countOutput" returns same value for super admins and regular users with restricted permissions Created: 2015 Dec 10 Updated: 2017 May 30 Resolved: 2016 Jan 19 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | API (A) |
| Affects Version/s: | 2.0.16, 2.2.11, 2.4.7, 3.0.0alpha4 |
| Fix Version/s: | 2.2.12rc1, 2.4.8rc1, 3.0.0beta1 |
| Type: | Incident report | Priority: | Trivial |
| Reporter: | Ivo Kurzemnieks | Assignee: | Unassigned |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | api, count, screens | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Description |
|
screen.get API method without "countOutput" works fine, validates permissions and unsets restricted resources from $result by array index, but with "countOutput" API returns a numeric value (or with "groupCount" returns "rowscount" array), but restricted resources are not removed from $result. |
| Comments |
| Comment by Gunars Pujats (Inactive) [ 2015 Dec 16 ] |
|
(1) No translation strings changed. iivs CLOSED |
| Comment by Gunars Pujats (Inactive) [ 2015 Dec 16 ] |
|
RESOLVED in development branch svn://svn.zabbix.com/branches/dev/ZBX-10150 |
| Comment by Ivo Kurzemnieks [ 2015 Dec 17 ] |
|
(2) The fix is like a hack and is incorrect. The SQL now is different, output with "limit" returns different results. gunarspujats As discussed with sasha, it's better to stay with returning count of array elements rather then changing request logic. gunarspujats RESOLVED in r57431 iivs CLOSED |
| Comment by Ivo Kurzemnieks [ 2016 Jan 13 ] |
|
TESTED |
| Comment by Gunars Pujats (Inactive) [ 2016 Jan 14 ] |
|
Fixed in:
|
| Comment by Gunars Pujats (Inactive) [ 2016 Jan 14 ] |
|
(3) API documentation: sasha I've added a some details. gunarspujats Thanks, CLOSED |