Commit e67aa95
committed
Fix job_errors view leaking failed jobs to non-owners
A missing pair of parentheses made operator precedence apply the role
check only to crash rows. Failed jobs bypassed the check, so any user
could see error details from other users' jobs.1 parent 903aaf0 commit e67aa95
3 files changed
Lines changed: 5 additions & 11 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
323 | 323 | | |
324 | 324 | | |
325 | 325 | | |
326 | | - | |
327 | | - | |
| 326 | + | |
328 | 327 | | |
329 | 328 | | |
330 | 329 | | |
| |||
Lines changed: 3 additions & 9 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
82 | 82 | | |
83 | 83 | | |
84 | 84 | | |
85 | | - | |
86 | | - | |
87 | | - | |
88 | | - | |
89 | | - | |
90 | | - | |
| 85 | + | |
| 86 | + | |
| 87 | + | |
91 | 88 | | |
92 | 89 | | |
93 | 90 | | |
94 | 91 | | |
95 | 92 | | |
96 | 93 | | |
97 | 94 | | |
98 | | - | |
99 | 95 | | |
100 | | - | |
101 | | - | |
102 | 96 | | |
103 | 97 | | |
104 | 98 | | |
| |||
0 commit comments