Kiu/xenadmin
1
0
Fork 0
mirror of https://github.com/xcp-ng/xenadmin.git synced 2024-12-03 16:41:04 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Missing RBAC permission checks for CreateDiskAction.

Browse Source 
Signed-off-by: Konstantina Chremmou <Konstantina.Chremmou@cloud.com>
This commit is contained in:
Konstantina Chremmou 2023-02-23 15:19:22 +00:00
parent d3a2805af8
commit 87ff42086f
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
XenAdmin/Dialogs/NewDiskDialog.cs
View File

@ -165,6 +165,7 @@ namespace XenAdmin.Dialogs
if (_vm != null) if (_vm != null)
{ {
//note that this action alters the Device
var action = new CreateDiskAction(Disk, Device, _vm); var action = new CreateDiskAction(Disk, Device, _vm);
using (var dialog = new ActionProgressDialog(action, ProgressBarStyle.Blocks)) using (var dialog = new ActionProgressDialog(action, ProgressBarStyle.Blocks))
dialog.ShowDialog(); dialog.ShowDialog();

2
XenModel/Actions/VDI/CreateDiskAction.cs
View File

@ -53,6 +53,8 @@ namespace XenAdmin.Actions
{ {
_device = device; _device = device;
VM = vm; VM = vm;
ApiMethodsToRoleCheck.AddRange("VM.get_allowed_VBD_devices", "VDI.create");
} }
protected override void Run() protected override void Run()