Uploaded image for project: 'SonarQube'
  1. SonarQube
  2. SONAR-6128

Should not be possible to delete global default dashboards

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.5
    • Fix Version/s: 4.5.4, 5.0.1, 5.1
    • Component/s: None
    • Labels:
      None

      Description

      Symptom: 404 error on homepage
      Cause: table ACTIVE_DASHBOARDS does not contain any default global dashboards -> 0 results for:

      select count(*) from active_dashboards a
      inner join dashboards d on a.dashboard_id=d.id
      where d.user_id is null and d.is_global = true
      

      The bug comes from HTTP request "POST admin_dashboards/remove/

      {id}

      ". It correctly verifies that there are other remaining default dashboards, but it mixes global and project dashboards. UI does not have the problem.

      Note that UI doesn't have the pb and system admin rights are required to execute the request. For this reason it is not considered as a security vulnerability.

        Attachments

          Activity

            People

            • Assignee:
              simon.brandhof Simon Brandhof (Inactive)
              Reporter:
              simon.brandhof Simon Brandhof (Inactive)
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Due:
                Created:
                Updated:
                Resolved: