26 Jun
2023
26 Jun
'23
7:52 a.m.
Branch: refs/heads/2.2.0
Home: https://github.com/Checkmk/checkmk
Commit: ab3af7d6333787a1c9b3f7db825b2a68a77563d3
https://github.com/Checkmk/checkmk/commit/ab3af7d6333787a1c9b3f7db825b2a68a…
Author: Gav <gavin.mcguigan(a)checkmk.com>
Date: 2023-06-26 (Mon, 26 Jun 2023)
Changed paths:
A .werks/15890
M cmk/gui/fields/__init__.py
M cmk/gui/fields/definitions.py
M cmk/gui/plugins/openapi/endpoints/site_management/__init__.py
M cmk/gui/plugins/openapi/endpoints/user_config/__init__.py
M cmk/gui/plugins/openapi/restful_objects/decorators.py
M cmk/gui/plugins/openapi/utils.py
M tests/testlib/rest_api_client.py
M tests/unit/cmk/gui/plugins/openapi/test_openapi_user.py
Log Message:
-----------
15890 FIX user: read permissions are now checked in the request schema before
delete/edit/create user
When calling either of the following endpoints, a 401 will be returned
if the user doesn't have read access for users.
POST /domain-types/user_config/collections/all
PUT /objects/user_config/{username}
DELETE /objects/user_config/{username}
The site management endpoint 'site_login' is also affected by this change,
since a valid existing user is required to login.
CMK-13156
Change-Id: Ic993305594d9e174c3d203fdb6970863508ba281