enforce ACL filtering on monitor API (fix #242)

This commit is contained in:
ziirish 2018-01-05 23:55:00 +01:00
parent 010c65cc9a
commit c91f14476d
No known key found for this signature in database
GPG key ID: 72DB229A64B54E46

View file

@ -242,7 +242,10 @@ class Live(Resource):
res.append(data)
else:
for client in running:
# TODO: fix #242 / add ACL test
# ACL
if has_acl and not is_admin and \
not current_user.acl.is_client_allowed(client, server):
continue
data = {}
data['client'] = client
try: