Victor Saisa Lopez 67a530e59e HOR-1360 "CLONE - Penetration test >> Privilege Escalation" SOLVED ...

Issue:
    CLONE - Penetration test >> Privilege Escalation
Cause:
    En el profile del usuario se puede asignar un valor al rol en un request POST
Solution:
    - Se hizo un analisis de la propuesta sobre "separar los archivos", este punto no se realizo, en vez de esto
      se separo los request con un switch-case
    - Existe duplicidad de codigo en los files "usersAjax.php" y "ProcessMaker\BusinessModel\User.php",
      por lo que ahora en el file "usersAjax.php" se llama a los metodos "create y update" de la clase "ProcessMaker\BusinessModel\User.php"
    - No se hizo cambios en front-end

2016-07-06 12:57:59 -04:00

..

actionsByEmail

HOR-466

2016-03-15 11:40:59 -04:00

appFolder

HOR-659 Documents>Move>Uncaught TypeError: Cannot read property 'isLeaf' of null(anonymous function) @ ext-all.js:78h.Event.fire @ ext-all.js:2h.Observable.fireEvent .........

2016-03-31 12:31:38 -04:00

authSources

HOR-789

2016-04-20 19:46:20 -04:00

cases

HOR-170

2016-06-23 18:17:35 -04:00

controls

PM-1887

2015-07-21 10:21:32 -04:00

dashboard

HOR-435 It's necesary to close the session, if we close processmaker and open again HOME and DESIGNER are blocked

2016-03-22 17:28:05 -04:00

dbConnections

HOR-1092 Medium: Cross-Site Scripting

2016-06-02 14:47:36 -04:00

departments

HOR-509 "Departaments> Al dar click en todos para asignar..." SOLVED

2016-03-22 16:10:18 -04:00

dynaforms

I solved some issues Cross-Site Scripting [April 18]

2015-04-21 09:35:39 -04:00

emailServer

HOR-374

2016-03-03 17:53:19 -04:00

enterprise

Improvement list plugins and features

2015-05-10 16:32:01 -04:00

events

Merged in cmdeguzman/cdgz-processmaker/HOR-282-3018 (pull request #3783)

2016-03-09 17:52:49 -04:00

groups

HOR-374

2016-03-03 16:12:43 -04:00

inputdocs

PM-2254 "Designer>Designer BPMN>Input Documents..." SOLVED

2015-04-30 15:53:59 -04:00

install

I solved issues with Cryptographic Issues [April 18]

2015-04-21 12:03:52 -04:00

login

HOR-1031: Security - Remove login/dbInfo page

2016-06-09 12:24:01 -04:00

mails

HOR-374

2016-03-03 16:12:43 -04:00

messages

…

oauth2

R-1007

2016-06-14 13:07:06 -04:00

outputdocs

xss 2

2015-03-18 17:12:38 -04:00

patterns

PM-1587 Audit Log para todas las opciones del menu contextual de la TAREA

2015-02-19 15:24:51 -04:00

processCategory

PM-813 Process Category List

2014-11-12 13:48:04 -04:00

processes

HOR-1362

2016-06-30 09:19:26 -04:00

reports

…

reportTables

…

roles

HOR-474 "Asignacion de un rol a usuarios tarda demasiado " SOLVED

2016-03-21 12:22:54 -04:00

services

HOR-1373

2016-07-05 08:46:37 -04:00

setup

HOR-1092 Medium: Cross-Site Scripting

2016-06-02 14:47:36 -04:00

steps

IMPROVEMENT for the issue PM-1472

2015-02-20 16:34:32 -04:00

strategicDashboard

HOR-435 It's necesary to close the session, if we close processmaker and open again HOME and DESIGNER are blocked

2016-03-22 17:28:05 -04:00

tasks

PM-1472 16565: Red background graphic for error messages needs to be taller to see the text clearly

2015-02-20 15:33:18 -04:00

tools

HOR-282 Cleaned up more issues with XSS.

2016-03-03 13:23:23 +00:00

tracker

PM-3474

2015-09-25 19:55:26 -04:00

triggers

PM-2835 "Adicionar los siguientes features..." SOLVED

2015-06-01 14:15:53 -04:00

users

HOR-1360 "CLONE - Penetration test >> Privilege Escalation" SOLVED

2016-07-06 12:57:59 -04:00