[jira] [Created] (GUACAMOLE-81) Permissions of primary connection do not affect creation of sharing profiles

["Michael Jumper (JIRA)" <ji...@apache.org>]

Michael Jumper created GUACAMOLE-81:
---------------------------------------

             Summary: Permissions of primary connection do not affect creation of sharing profiles
                 Key: GUACAMOLE-81
                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-81
             Project: Guacamole
          Issue Type: Bug
          Components: guacamole-auth-jdbc
            Reporter: Michael Jumper
            Priority: Blocker
             Fix For: 0.9.10-incubating


When creating connections of connection groups within a parent connection group, "UPDATE" permission is required on the parent group. If moving a connection (or group) to a different parent group, "UPDATE" permission is required on both the old and new parents.

This check should also be performed when associating a sharing profile with its primary connection ... but it isn't. A user with permission to create sharing profiles will be able to do so within any connection, even if they do not have "UPDATE" permission on that connection.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)