AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-05 07:07:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Require credential module access to view or share credentials

Browse Source
This commit is contained in:
johnnyq
2026-07-28 00:40:33 -04:00
parent 4c65b8c561
commit 2e855f62c9
2 changed files with 41 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
agent/ajax.php
View File

@@ -203,6 +203,11 @@ if (isset($_GET['share_generate_link'])) {
}
if ($item_type == "Credential") {
// Sharing a credential hands out the plaintext, so it needs the same
// module access as reading one anywhere else in the app
enforceUserPermission('module_credential');
$credential = mysqli_query($mysqli, "SELECT credential_name, credential_username, credential_password FROM credentials WHERE credential_id = $item_id AND credential_client_id = $client_id LIMIT 1");
$row = mysqli_fetch_assoc($credential);