MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: [correlation:defaultCorrelation] Ignore ACL check for site_admins

pull/8530/head
Sami Mokaddem 2022-08-04 10:48:17 +02:00
parent 49575533ad
commit 3f65c3ef94
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Model/Behavior/DefaultCorrelationBehavior.php
View File

@ -463,6 +463,9 @@ class DefaultCorrelationBehavior extends ModelBehavior
private function checkCorrelationACL($user, $correlation, $sgids, $prefix)
{
if ($user['Role']['perm_site_admin']) {
return true;
}
// check if user can see the event
if (isset($correlation['Correlation'])) {
$correlation = $correlation['Correlation'];