mirror of
https://github.com/kemko/nomad.git
synced 2026-01-01 16:05:42 +03:00
The job statuses endpoint does not filter jobs by the namespace query parameter unless the user passes a management token. The RPC handler creates a filter based on all the allowed namespaces but improperly conditions reducing this down to only the requested set on there being a management token. Note this does not give the user access to jobs they shouldn't have, only ignores the parameter. Remove the RPC handler's extra condition that prevents using the requested namespace. This is safe because we specifically check the ACL for that namespace earlier in the handler. Fixes: https://github.com/hashicorp/nomad/issues/23370
4 lines
86 B
Plaintext
4 lines
86 B
Plaintext
```release-note:bug
|
|
ui: Fixed support for namespace parameter on job statuses API
|
|
```
|