Project

General

Profile

Actions
Copy link

Bug #7584

closed

privileges abuse with page-diagnostics-dns

Added by Jeremy C. Reed over 7 years ago. Updated over 7 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
2.4.0
Start date:
05/20/2017
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All

Description

my user has
page-diagnostics-dns privilege which provides DNS lookups
but also allowed the user to create an alias
"Created from Diagnostics-> DNS Lookup".

But now the user cannot see this alias nor has any way to remove it
(because needs page-firewall-aliases privilege).

I'd suggest that capability to do DNS lookups diagnostics shouldn't
also allow addition of aliases.

Actions
Copy link

Also available in: Atom PDF