Checkmk 2.0 ist hier! Alle Neuigkeiten erfahren.

Werk #11616: Fix accidental publishing of cloned user elements (e.g. bookmark lists)

Komponente GUI
Titel Fix accidental publishing of cloned user elements (e.g. bookmark lists)
Datum 01.12.2020
Checkmk-Editon Checkmk Raw (CRE)
Checkmk-Version 2.1.0i1 1.6.0p20 2.0.0b2
Level Kleine Änderung
Klasse Bugfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

When a user clones e.g. a public shared bookmark list of another user, the "public" flag was inherited during that clone operation and the cloned bookmark list was shared to other users despite the fact that the user was not permitted to share things to other users.

This change adds an information about the visibility to other users to the edit page of these elements: "The view is only visible to you. You can not share it, because you don't have the permission to share it."

The permission of the owner to share elements is now explicitly checked when trying accessing the elements as another user.

Besides the bookmark list other elements like custom snapins, custom graphs, forecast graphs, SLAs, graph collections and graph tunings were also affected.

Zur Liste aller Werks