-
-
Notifications
You must be signed in to change notification settings - Fork 31
Open
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers
Description
Describe the bug
Currently users can view all machine IDs even if they should not have access to them. Although machines are protected with passwords, this still exposes metadata that should not be exposed, leaking information (though hopefully your users are not your adversaries!)
This also applies to the groups tab in the rustdesk app.
Describe the environment
Not relevant, but docker compose, latest
How to Reproduce the bug
Steps to reproduce the behavior:
- create a normal non-admin user
- browse devices page, see all devices listed
Expected behavior
only devices for that individual user should be listed if they are not an admin
Additional context
N/A
Notes
- Please write in english only. If you provide some images in different languages, you're required to write a translation in english.
- In any case, NEVER put here the content if your
id_ed25519file
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomers