fernando/luos
1
0
Fork 0
Code Releases Activity

HOR-75 "Security hole: REST endpoints to assign..." SOLVED

Browse Source
This commit is contained in:
Luis Fernando Saisa Lopez
2016-07-20 10:47:08 -04:00
parent c243869d18
commit 8927f55e40
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
workflow/engine/src/ProcessMaker/Services/Api/Role/Permission.php
View File

@@ -49,6 +49,9 @@ class Permission extends Api
/** /**
* @url POST /:rol_uid/permission * @url POST /:rol_uid/permission
* *
* @access protected
* @class AccessControl {@permission PM_USERS}
*
* @param string $rol_uid {@min 32}{@max 32} * @param string $rol_uid {@min 32}{@max 32}
* @param array $request_data * @param array $request_data
* *
@@ -66,8 +69,12 @@ class Permission extends Api
/** /**
* @url DELETE /:rol_uid/permission/:per_uid * @url DELETE /:rol_uid/permission/:per_uid
* *
* @access protected
* @class AccessControl {@permission PM_USERS}
*
* @param string $rol_uid {@min 32}{@max 32} * @param string $rol_uid {@min 32}{@max 32}
* @param string $per_uid {@min 32}{@max 32} * @param string $per_uid {@min 32}{@max 32}
*
*/ */
public function doDeletePermission($rol_uid, $per_uid) public function doDeletePermission($rol_uid, $per_uid)
{ {