Custom Query (2152 matches)

Filters
 
Or
 
  
 
Columns

Show under each result:

Results (130 - 132 of 2152)

← 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 →
Ticket Resolution Summary Owner Reporter
#131 fixed Groups REST interface dread dread

Reported by dread, 5 years ago.
Description

Controlling Groups through a REST interface.

#132 fixed Security hole - read package/group list (REST) rgrp dread

Reported by dread, 5 years ago.
Description

Using REST interface you can list packages and groups without authorization being checked.

Can be fixed using more advanced query to check authz.

#133 fixed Security hole - search package/group (WUI & REST) rgrp dread

Reported by dread, 5 years ago.
Description

Using WUI or REST interface you can search packages and groups without authorization being checked.

On the REST interface you can also read all the attributes of the packages using the 'all-fields' option.

Can be fixed using more advanced query to check authz.

← 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 →
Note: See TracQuery for help on using queries.