Security hardening

security hardening
2026-02-13 15:34:12 +01:00 · 2024-12-13 15:05:52 +01:00 · 2024-11-27 14:47:44 +01:00
1 changed files with 2 additions and 1 deletions
--- a/datamodels/2.x/itop-portal-base/portal/src/Controller/ObjectController.php
+++ b/datamodels/2.x/itop-portal-base/portal/src/Controller/ObjectController.php
@@ -1246,7 +1246,8 @@ class ObjectController extends BrickController
 		$bIgnoreSilos = $oScopeValidator->IsAllDataAllowedForScope(UserRights::ListProfiles(), $sObjectClass);
 		$aParams = array('objects_id' => $aObjectIds);
 		$oSearch = DBObjectSearch::FromOQL("SELECT $sObjectClass WHERE id IN (:objects_id)");
-		if ($bIgnoreSilos === true)
+        $oScopeValidator->AddScopeToQuery($oSearch, $sObjectClass);
+        if ($bIgnoreSilos === true)
 		{
 			$oSearch->AllowAllData();
 		}
Author	SHA1	Message	Date
jf-cbd	cb16e397a4	Security hardening	2024-12-13 15:05:52 +01:00
jf-cbd	aa4376ca04	security hardening	2024-11-27 14:47:44 +01:00