GUAC-1391: Skip readable check when listing active sessions for system administrators.
This commit is contained in:
1 parent
87925d9dc6
commit
a0e18286d1
1 file changed
+4
+4
@@ -468,6 +468,10 @@ public abstract class AbstractGuacamoleTunnelService implements GuacamoleTunnelS
|
||||
if (records.isEmpty())
|
||||
return Collections.<ActiveConnectionRecord>emptyList();
|
||||
|
||||
// A system administrator can view all connections; no need to filter
|
||||
if (user.getUser().isAdministrator())
|
||||
return records;
|
||||
|
||||
// Build set of all connection identifiers associated with active tunnels
|
||||
Set<String> identifiers = new HashSet<String>(records.size());
|
||||
for (ActiveConnectionRecord record : records)
|
||||
|
||||
Reference in new issue
Block a user