Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
ProcessGroupResource.authorizeHandleDropAllFlowFilesRequest() checks the permissions for the Empty All Queues feature.
It is traversing over the process group hierarchy to check all the connections in the sub process groups.
Traversing seems to be not needed because getEncapsulatedConnections() returns all the connections in the hierarchy so the permissions can be checked the parent group level. Traversing + getEncapsulatedConnections() leads to duplicated permission checks for connections in the children process groups.
Attachments
Issue Links
- relates to
-
NIFI-7663 Allow user to empty all queues in a Process Group
- Resolved
- links to