Michael Jumper created GUACAMOLE-81:
---------------------------------------
Summary: Permissions of primary connection do not affect creation
of sharing profiles
Key: GUACAMOLE-81
URL: https://issues.apache.org/jira/browse/GUACAMOLE-81
Project: Guacamole
Issue Type: Bug
Components: guacamole-auth-jdbc
Reporter: Michael Jumper
Priority: Blocker
Fix For: 0.9.10-incubating
When creating connections of connection groups within a parent connection
group, "UPDATE" permission is required on the parent group. If moving a
connection (or group) to a different parent group, "UPDATE" permission is
required on both the old and new parents.
This check should also be performed when associating a sharing profile with its
primary connection ... but it isn't. A user with permission to create sharing
profiles will be able to do so within any connection, even if they do not have
"UPDATE" permission on that connection.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
