Files
nomad/.changelog/23456.txt
Tim Gross 7d3ce7e92d job statuses: fix filtering for namespace parameter (#23456)
The job statuses endpoint does not filter jobs by the namespace query parameter
unless the user passes a management token. The RPC handler creates a filter
based on all the allowed namespaces but improperly conditions reducing this down
to only the requested set on there being a management token. Note this does not
give the user access to jobs they shouldn't have, only ignores the parameter.

Remove the RPC handler's extra condition that prevents using the requested
namespace. This is safe because we specifically check the ACL for that namespace
earlier in the handler.

Fixes: https://github.com/hashicorp/nomad/issues/23370
2024-06-27 16:19:36 -04:00

4 lines
86 B
Plaintext

```release-note:bug
ui: Fixed support for namespace parameter on job statuses API
```