diff --git a/.wolf/buglog.json b/.wolf/buglog.json index d65436c7..2422acfd 100644 --- a/.wolf/buglog.json +++ b/.wolf/buglog.json @@ -17753,9 +17753,9 @@ }, { "id": "bug-1934", - "status": "open", + "status": "fixed", "status_updated": "2026-10-10", - "status_note": "newly logged", + "status_note": "", "component": "apiserver", "severity": "security", "timestamp": "2026-10-10T04:31:25Z", @@ -17774,14 +17774,16 @@ "related_bugs": [ "bug-1935" ], - "fix_commits": [], + "fix_commits": [ + "4a38bb3c" + ], "record": ".wolf/bugs/bug-1934.md" }, { "id": "bug-1935", - "status": "open", + "status": "fixed", "status_updated": "2026-10-10", - "status_note": "newly logged", + "status_note": "", "component": "apiserver", "severity": "wrong-result", "timestamp": "2026-10-10T04:31:27Z", @@ -17800,7 +17802,9 @@ "related_bugs": [ "bug-1934" ], - "fix_commits": [], + "fix_commits": [ + "4a38bb3c" + ], "record": ".wolf/bugs/bug-1935.md" } ] diff --git a/.wolf/bugs/bug-1934.md b/.wolf/bugs/bug-1934.md index 10bfb1af..e0d303da 100644 --- a/.wolf/bugs/bug-1934.md +++ b/.wolf/bugs/bug-1934.md @@ -1,8 +1,8 @@ --- id: "bug-1934" -status: "open" +status: "fixed" status_updated: "2026-10-10" -status_note: "newly logged" +status_note: "" component: "apiserver" severity: "security" timestamp: "2026-10-10T04:31:25Z" @@ -11,6 +11,7 @@ occurrences: 1 files: ["src/frontend/apiserver/controllers/jobs.go", "src/frontend/apiserver/controllers/rbac_check.go", "src/frontend/apiserver/models/roles.go", "src/frontend/apiserver/config/rbac.yaml"] tags: ["apiserver", "rbac", "security", "self_ug"] related: ["bug-1935"] +fix_commits: ["4a38bb3c"] --- # bug-1934: apiserver treats a job:view grant scoped only to self_ug as all: user sees every user's jobs diff --git a/.wolf/bugs/bug-1935.md b/.wolf/bugs/bug-1935.md index 072228ca..04ec7e6c 100644 --- a/.wolf/bugs/bug-1935.md +++ b/.wolf/bugs/bug-1935.md @@ -1,8 +1,8 @@ --- id: "bug-1935" -status: "open" +status: "fixed" status_updated: "2026-10-10" -status_note: "newly logged" +status_note: "" component: "apiserver" severity: "wrong-result" timestamp: "2026-10-10T04:31:27Z" @@ -11,6 +11,7 @@ occurrences: 1 files: ["src/frontend/apiserver/models/jobs.go", "src/frontend/apiserver/controllers/jobs.go", "src/frontend/xcecli/filters/job_filter.go"] tags: ["apiserver", "xcecli", "filter", "project"] related: ["bug-1934"] +fix_commits: ["4a38bb3c"] --- # bug-1935: xcecli jobs list -P fails: apiserver rejects project_name filter (unsupported filter)