Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Manglende autorisasjon på dialogelements, activitites. #213

Closed
2 tasks done
Tracked by #29
elsand opened this issue Oct 15, 2023 · 0 comments
Closed
2 tasks done
Tracked by #29

Manglende autorisasjon på dialogelements, activitites. #213

elsand opened this issue Oct 15, 2023 · 0 comments
Assignees
@oskogstad
Labels
auth Issue related to authentication / authorization bug Something isn't working

Comments

@elsand
Copy link
Member

elsand commented Oct 15, 2023 •
edited
Loading

Det er funnet tre feil under testing av tjenesteeierautorisasjon:

  • Det mangler autorisasjonskontroll på GET-endepunktene til /dialog/{dialogId}/elements og /dialog/{dialogId}/elements/{elementId}. Kjennskap til identifikatorer lar hvilken som helst tjenesteeier hente ut disse.
  • Samme feil gjelder også tilsvarende 'activities'-endepunkter

Image

.\run.ps1 -ApiEnvironment poc -ApiVersion v1 -TokenGeneratorUsername <redacted> -TokenGeneratorPassword <redacted> -FilePath .\tests\serviceowner\authorization.js

Tasks
Preview Give feedback
@elsand elsand added auth Issue related to authentication / authorization bug Something isn't working labels Oct 15, 2023
@elsand elsand changed the title Feil i autorisasjonskontroll Manglende autorisasjon på dialogelements, activitites. Feil responskode. Oct 15, 2023
@elsand elsand mentioned this issue Nov 6, 2023
Closed
@elsand elsand changed the title Manglende autorisasjon på dialogelements, activitites. Feil responskode. Manglende autorisasjon på dialogelements, activitites. Nov 13, 2023
@oskogstad oskogstad self-assigned this Dec 14, 2023
@oskogstad oskogstad mentioned this issue Dec 15, 2023
Merged
@elsand elsand closed this as completed Jan 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@oskogstad oskogstad

Labels
auth Issue related to authentication / authorization bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@elsand @oskogstad