Allows alert access to admins and non-admins w/o allowed networks

Addresses #5324
This commit is contained in:
Simone Mainardi 2021-05-25 18:14:17 +02:00
parent c7b6e038cb
commit 0855f627a0
29 changed files with 161 additions and 22 deletions

View file

@ -6,6 +6,7 @@ local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
package.path = dirs.installdir .. "/scripts/lua/modules/alert_store/?.lua;" .. package.path
local auth = require "auth"
local alert_utils = require "alert_utils"
local alert_consts = require "alert_consts"
local alert_entities = require "alert_entities"
@ -24,6 +25,11 @@ local res = {}
local ifid = _GET["ifid"]
if not auth.has_capability(auth.capabilities.alerts) then
rest_utils.answer(rest_utils.consts.err.not_granted)
return
end
if isEmptyString(ifid) then
rc = rest_utils.consts.err.invalid_interface
rest_utils.answer(rc)