[GUACAMOLE-81] Permissions of primary connection do not affect creation of sharing profiles

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.9.10-incubating
• Fix Version/s: 0.9.10-incubating
• Component/s: guacamole-auth-jdbc
• Assignee: Mike Jumper
• Reporter: Mike Jumper
• Created: 20/Aug/16 19:53
• Updated: 04/Dec/16 00:29
• Resolved: 21/Aug/16 04:09

Description

When creating connections of connection groups within a parent connection group, "UPDATE" permission is required on the parent group. If moving a connection (or group) to a different parent group, "UPDATE" permission is required on both the old and new parents.

This check should also be performed when associating a sharing profile with its primary connection ... but it isn't. A user with permission to create sharing profiles will be able to do so within any connection, even if they do not have "UPDATE" permission on that connection.