Skip to content

Study container scoping fixes - #8050

Open
labkey-klum wants to merge 7 commits into
developfrom
fb_study_owasp_fixes
Open

labkey-klum wants to merge 7 commits into
developfrom
fb_study_owasp_fixes

Conversation

@labkey-klum

Copy link
Copy Markdown
Contributor

Rationale

Container scoping related fixes for study as well as new or updated automation. This PR addresses the following issues:

@labkey-klum
labkey-klum requested a review from cnathe September 17, 2026 16:55
Comment thread study/src/org/labkey/study/controllers/StudyController.java Outdated
Report stored = getStoredReport(descriptor.getReportId());
Report toCheck = null != stored ? stored : report;

if (toCheck.canEdit(context.getUser(), context.getContainer(), errors))

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should the container used in the canEdit and canShare check be the context.getContainer() or the report container? or maybe this method should check that those two are the same.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, I think we want to ensure the report being updated is lives in the container that the update is originating from.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants