IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

dasboard_history: security fix, added orgId filter to dashboard version lookup

Browse Source
This commit is contained in:
Torkel Ödegaard
2017-06-07 14:21:40 +02:00
parent 3ba8aeb9a7
commit 46412c8475
4 changed files with 25 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/components/dashdiffs/compare.go
View File

@@ -65,6 +65,7 @@ func CalculateDiff(options *Options) (*Result, error) {
baseVersionQuery := models.GetDashboardVersionQuery{
DashboardId: options.Base.DashboardId,
Version: options.Base.Version,
OrgId: options.OrgId,
}
if err := bus.Dispatch(&baseVersionQuery); err != nil {
@@ -74,6 +75,7 @@ func CalculateDiff(options *Options) (*Result, error) {
newVersionQuery := models.GetDashboardVersionQuery{
DashboardId: options.New.DashboardId,
Version: options.New.Version,
OrgId: options.OrgId,
}
if err := bus.Dispatch(&newVersionQuery); err != nil {