z1pti3 / jimi

Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch jimi has developed into a fully fledged IT automation platform which effortlessly integrates with your existing tools unlocking the potential for autonomous IT and Security operations.
https://www.secureack.com
Apache License 2.0
161 stars 31 forks source link

[bug] Non-Admins Cannot Clear/Delete Debug Sessions #230

Closed b1scuit-thi3f closed 3 years ago

b1scuit-thi3f commented 3 years ago

https://github.com/z1pti3/jimi/blob/bf9a719991c25e91c69958561d66c9f8dad21fd4/core/debug.py#L337-L351

Users are not able to delete their own (or their groups) debug sessions. They also cannot clear them. This is caused by the fact that both calls go through the admin check which fails for all but administrative users.