HOR-75 "Security hole: REST endpoints to assign..." SOLVED

2016-07-20 10:47:08 -04:00
parent c243869d18
commit 8927f55e40
1 changed files with 7 additions and 0 deletions
--- a/workflow/engine/src/ProcessMaker/Services/Api/Role/Permission.php
+++ b/workflow/engine/src/ProcessMaker/Services/Api/Role/Permission.php
@@ -49,6 +49,9 @@ class Permission extends Api
    /**
     * @url POST /:rol_uid/permission
     *
+     * @access protected
+     * @class  AccessControl {@permission PM_USERS}
+     *
     * @param string $rol_uid      {@min 32}{@max 32}
     * @param array  $request_data
     *
@@ -66,8 +69,12 @@ class Permission extends Api
    /**
     * @url DELETE /:rol_uid/permission/:per_uid
     *
+     * @access protected
+     * @class  AccessControl {@permission PM_USERS}
+     *
     * @param string $rol_uid {@min 32}{@max 32}
     * @param string $per_uid {@min 32}{@max 32}
+     *
     */
    public function doDeletePermission($rol_uid, $per_uid)
    {