Skip to content
This repository has been archived by the owner on Nov 21, 2020. It is now read-only.

prevent leaking private data from configs to all users #750

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

sergeychikanov
Copy link
Contributor

The general settings configs now contain fields that should not be exposed to all users in the system such as cloud credentials and mail server logins.

This uses the now-unused showGeneralSettings permissions to match the manageGeneralSettings permission set on config mutations so that data for users without the appropriate level isn't returned.

@ghost
Copy link

ghost commented Apr 1, 2020

Congratulations 🎉. DeepCode analyzed your code in 1.108 seconds and we found no issues. Enjoy a moment of no bugs ☀️.

👉 View analysis in DeepCode’s Dashboard

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant