tyler.durden/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2025-11-09 00:10:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Check for permission in get_object()

Browse Source
This commit is contained in:
Johannes Schmidt 2025-09-22 12:26:03 +02:00
parent 61670d5f23
commit 07216bdf77
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/base/scriptutils.cpp
View File

@ -473,7 +473,15 @@ ConfigObject::Ptr ScriptUtils::GetObject(const Value& vtype, const String& name)
if (!ctype) if (!ctype)
return nullptr; return nullptr;
return ctype->GetObject(name); auto cfgObj = ctype->GetObject(name);
if (cfgObj) {
auto* frame = ScriptFrame::GetCurrentFrame();
if (frame->PermChecker->CanAccessConfigObject(cfgObj)) {
return cfgObj;
}
}
return nullptr;
} }
Array::Ptr ScriptUtils::GetObjects(const Type::Ptr& type) Array::Ptr ScriptUtils::GetObjects(const Type::Ptr& type)