Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #13198: REST endpoint GET /artifact_files/{id} does not verify all the artifact/tracker permissions

Download Browse

Also part of story #12554: have private projects without restricted members Change-Id: I0b184d1025e196abe30f980bc59f1a4888b3573b

+60 −175
Thomas Gerbet (tgerbet) 2019-04-02 18:45
Thomas Gerbet (tgerbet) 2019-04-02 20:58
a669d6ef7ccedea51cac9e5a3ce0a18222aa5a08
c9b892cbc5db83bba8b0df467aac1b386c702f27
git #tuleap/stable/a669d6ef7ccedea51cac9e5a3ce0a18222aa5a08

Modified Files

Side by side diff
Inline diff
Name
M plugins/tracker/include/REST/v1/ArtifactFilesResource.class.php +40 −57 Go to diff View file
M plugins/tracker/include/REST/v1/ArtifactTemporaryFilesResource.class.php +5 −28 Go to diff View file
D plugins/tracker/include/Tracker/Artifact/Attachment/PermissionDeniedOnFieldException.php +0 −22 Go to diff View file
M plugins/tracker/include/Tracker/Artifact/Attachment/TemporaryFileManager.class.php +0 −45 Go to diff View file
M plugins/tracker/include/Tracker/FileInfoFactory.class.php +9 −19 Go to diff View file
M plugins/tracker/include/Tracker/Tracker_FileInfo.class.php +2 −2 Go to diff View file
M plugins/tracker/tests/Artifact/Attachment/TemporaryFileManagerTest.php +4 −2 Go to diff View file