anyone is able to registered command from get method

elements-at / ProcessManager

Manage processes in Pimcore

Other

45 stars 31 forks source link

Closed gobindpimcore closed 3 years ago

gobindpimcore commented 3 years ago

anyone able to registered command from get method

So please only allow post method to save command elementsprocessmanager/config/save

ctippler commented 3 years ago

Hi,

well, not anyone - just users with the configuration permission.... but restriction to post request is better, i agree - changed it.

Thx for the hint. Regards, Christian