upstream/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2026-02-03 20:40:17 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Check for permission in get_object()

Browse source
This commit is contained in:
Johannes Schmidt 2025-09-22 12:26:03 +02:00
parent 61670d5f23
commit 07216bdf77
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
lib/base/scriptutils.cpp
View file

@ -473,7 +473,15 @@ ConfigObject::Ptr ScriptUtils::GetObject(const Value& vtype, const String& name)
if (!ctype)
return nullptr;
return ctype->GetObject(name);
auto cfgObj = ctype->GetObject(name);
if (cfgObj) {
auto* frame = ScriptFrame::GetCurrentFrame();
if (frame->PermChecker->CanAccessConfigObject(cfgObj)) {
return cfgObj;
}
}
return nullptr;
}
Array::Ptr ScriptUtils::GetObjects(const Type::Ptr& type)