Testlink asks testlink user from Redmine for admin rights

Ask community to help.

Moderators: Amaradana, TurboPT, TL Developers

Testlink asks testlink user from Redmine for admin rights

Postby milleniym » Mon Nov 19, 2018 1:40 pm

Testlink asks "testlink_user" from Redmine for admin rights while creating issue from inside of testlink.

here is a errorcode
Code: Select all
Started GET "/users.xml?limit=1000" for "IP" at 2018-11-09 16:29:34 +0300
Processing by UsersController#index as XML
  Parameters: {"limit"=>"1000"}
  Current user: testlink (id=255)
Filter chain halted as :require_admin rendered or redirected
Completed 403 Forbidden in 14ms (ActiveRecord: 2.5ms)


Testlink going to redmine and using "X-Redmine-API-Key" that requires "admin rights" in redmine for "testlink_user".
we dont want mark "testlink_user" in redmine as admin.
#1 http://www.redmine.org/projects/redmine ... ersonation

but we can create issue in redmine by "testlink_user" apikey without admin rights and used this method from redmine.
#2 http://www.redmine.org/projects/redmine ... g-an-issue

I tried to find in testlink sources and found redmine-rest-api.php
there i just found the method which confirms "testlink user" in users.xml

administrative access for infrastucture account is a security risk.

- can u approve its just using users.xml to find "testlink_user" and there is no hidden possibilities.
- can u tell us how to switch #1 to #2 method if its possible.
milleniym
TestLink user
 
Posts: 2
Joined: Sun Nov 18, 2018 10:15 am

Re: Testlink asks testlink user from Redmine for admin righ

Postby milleniym » Mon Nov 19, 2018 1:42 pm

sry didnt saw this section when created a topic.
guess its should be moved there.
viewforum.php?f=46
milleniym
TestLink user
 
Posts: 2
Joined: Sun Nov 18, 2018 10:15 am


Return to Installation and configuration



Who is online

Users browsing this forum: No registered users and 2 guests