Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-924

Grouper WS allows unauthorized users to delete attribute assignments

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 1.6.4, 2.0.4, 2.1.5
    • 1.6.3, 2.0.3, 2.1.4
    • WS
    • None

    Description

      This could be possible if the authorized user knows the attribute assignment id, which they could get if they have read only access.

      Attachments

        Activity

          People

            shilen.patel@at.internet2.edu Shilen Patel (duke.edu)
            shilen.patel@at.internet2.edu Shilen Patel (duke.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: