tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Security: Require permissions for executing common service commands

This commit is contained in:
Eric Lippmann 2015-01-22 15:23:02 +01:00
parent 44718e5012
commit 3d7b375ab4
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
modules/monitoring/application/controllers/ServiceController.php
View File

@ -47,6 +47,8 @@ class Monitoring_ServiceController extends MonitoredObjectController
*/ */
public function acknowledgeProblemAction() public function acknowledgeProblemAction()
{ {
$this->assertPermission('monitoring/command/acknowledge-problem');
$this->view->title = $this->translate('Acknowledge Service Problem'); $this->view->title = $this->translate('Acknowledge Service Problem');
$this->handleCommandForm(new AcknowledgeProblemCommandForm()); $this->handleCommandForm(new AcknowledgeProblemCommandForm());
} }
@ -56,6 +58,8 @@ class Monitoring_ServiceController extends MonitoredObjectController
*/ */
public function addCommentAction() public function addCommentAction()
{ {
$this->assertPermission('monitoring/command/add-comment');
$this->view->title = $this->translate('Add Service Comment'); $this->view->title = $this->translate('Add Service Comment');
$this->handleCommandForm(new AddCommentCommandForm()); $this->handleCommandForm(new AddCommentCommandForm());
} }
@ -65,6 +69,8 @@ class Monitoring_ServiceController extends MonitoredObjectController
*/ */
public function rescheduleCheckAction() public function rescheduleCheckAction()
{ {
$this->assertPermission('monitoring/command/schedule-check');
$this->view->title = $this->translate('Reschedule Service Check'); $this->view->title = $this->translate('Reschedule Service Check');
$this->handleCommandForm(new ScheduleServiceCheckCommandForm()); $this->handleCommandForm(new ScheduleServiceCheckCommandForm());
} }
@ -74,6 +80,8 @@ class Monitoring_ServiceController extends MonitoredObjectController
*/ */
public function scheduleDowntimeAction() public function scheduleDowntimeAction()
{ {
$this->assertPermission('monitoring/command/schedule-downtime');
$this->view->title = $this->translate('Schedule Service Downtime'); $this->view->title = $this->translate('Schedule Service Downtime');
$this->handleCommandForm(new ScheduleServiceDowntimeCommandForm()); $this->handleCommandForm(new ScheduleServiceDowntimeCommandForm());
} }
@ -83,6 +91,8 @@ class Monitoring_ServiceController extends MonitoredObjectController
*/ */
public function processCheckResultAction() public function processCheckResultAction()
{ {
$this->assertPermission('monitoring/command/process-check-result');
$this->view->title = $this->translate('Submit Passive Service Check Result'); $this->view->title = $this->translate('Submit Passive Service Check Result');
$this->handleCommandForm(new ProcessCheckResultCommandForm()); $this->handleCommandForm(new ProcessCheckResultCommandForm());
} }