Uploaded image for project: 'JS - JobScheduler'
  1. JS - JobScheduler
  2. JS-1154

JobScheduler should execute only show_... commands via HTTP GET

    XMLWordPrintable

Details

    Description

      Currently JobScheduler is able to execute xml commands via HTTP GET. Due to security reasons it should not be able to excute commands like <start_job .../>, <add_order .../>, <terminate .../> etc.

      Only <show_.../> commands should be possible anymore.

      If one of the blocked commands should be executed the HTTP response is

      403 Forbidden

      .

      Attachments

        Activity

          People

            oh Oliver Haufe
            ss Stefan Schädlich (Inactive)
            Stefan Schädlich Stefan Schädlich (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: