From df391d5966eaa0cfcc703a05678a20f12d38efcb Mon Sep 17 00:00:00 2001 From: Benedikt Kulmann Date: Mon, 14 Dec 2020 23:21:53 +0100 Subject: [PATCH] Changelog --- changelog/unreleased/settings-permissions.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 changelog/unreleased/settings-permissions.md diff --git a/changelog/unreleased/settings-permissions.md b/changelog/unreleased/settings-permissions.md new file mode 100644 index 0000000000..32f0876feb --- /dev/null +++ b/changelog/unreleased/settings-permissions.md @@ -0,0 +1,7 @@ +Bugfix: Permission checks for settings write access + +Tags: settings + +There were several endpoints with write access to the settings service that were not protected by permission checks. We introduced a generic settings management permission to fix this for now. Will be more fine grained later on. + +https://github.com/owncloud/ocis/pull/1092