Uploaded image for project: 'SonarQube'
  1. SonarQube
  2. SONAR-9331

Tag search returns tags of issues, that the user has no access to

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 6.4
    • Fix Version/s: 6.5-M1, 6.5
    • Component/s: Issues
    • Labels:

      Description

      api/issues/tags currently does not apply authorization filters to the issues, that are queried in the index.

      An example:

      1. User A analyses a private project
        • an issue is created
      2. User A tags this issue with "myCustomTag"
      3. Anonymous searches for tags
        • Other then expected, in the example anonymous will see "myCustomTag"

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              daniel.schwarz Daniel Schwarz (Inactive)
              Reporter:
              daniel.schwarz Daniel Schwarz (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Due:
                Created:
                Updated:
                Resolved: