Skip to content

MBS-11259: Check the query capability before running it in the background - #6

Merged
TobiGa merged 2 commits into
main-forkedfrom
MBS-11259_Check_Query_Capability_On_Background_Run
Oct 14, 2026
Merged

TobiGa merged 2 commits into
main-forkedfrom
MBS-11259_Check_Query_Capability_On_Background_Run

Conversation

@PM84

@PM84 PM84 commented Oct 9, 2026

Copy link
Copy Markdown

This issue was identified during a penetration test. The background run action and the adhoc task did not check the capability configured for the query, so excluded users could still run it; this change enforces that capability in both places.

@TobiGa
TobiGa merged commit 37d861d into main-forked Oct 14, 2026
0 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants