search

xapi-project / xen-api

The Xapi Project's XenAPI Server
http://xenproject.org/developers/teams/xapi.html
Other
346 stars 283 forks source link

CA-394169: Allow task to have permissions on itself #5736

Closed GabrielBuica closed 3 months ago

GabrielBuica commented 3 months ago

Do not check permissions of a task if it is acting on itself. In the case the session is lost, the task needs to be able to update itself.

If the session were to be lost, we would not able to retrieve back the correct auth_user_id. If the task ids match implies that we know we were already authorized.

edwintorok commented 3 months ago

The CI failure is from master, fix merged here, rebase your branch: https://github.com/xapi-project/xen-api/pull/5737