[XRAY-4484] Permission for "Browse Projects" is not taken into account by the REST API - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Done
Affects Version/s: R3.4.3
Fix Version/s: R3.6.0
Component/s: REST_API
Labels:
None

Sprint:
R3.6.0 S4, R3.6.0 S3
Requirement Status:
OK
- 2

Description

Permission for "Browse Projects" is not taken into account by the REST API.

Users without permissions for Browse Projects, can make a GET call via rest API and obtain information.

Endpoint used:
http://serverurl/rest/raven/latest/execution/result?testExecKey=CALC-1036

Attachments

Activity

People

Assignee:: Marcelo Ferreira

Reporter:: Ana Teixeira

Votes:: 1 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 23/Sep/19 10:20 AM

Updated:: 17/Jan/20 2:53 PM

Resolved:: 02/Dec/19 4:58 PM

Time Tracking

Estimated:

Not Specified

Remaining:

0m

Logged:

1w 2d 7h 10m