From: Eric Bollengier <eric@baculasystems.com>
Date: Wed, 22 Mar 2023 13:54:53 +0000 (+0100)
Subject: Check client ACL on purge jobid=x
X-Git-Tag: Release-13.0.3~17
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3dea7fb069223e1f4ec68f05a54204dacfeb1656;p=thirdparty%2Fbacula.git

Check client ACL on purge jobid=x
---

diff --git a/bacula/src/dird/ua_purge.c b/bacula/src/dird/ua_purge.c
index 6c96ba962..f23c14040 100644
--- a/bacula/src/dird/ua_purge.c
+++ b/bacula/src/dird/ua_purge.c
@@ -105,10 +105,14 @@ int purge_cmd(UAContext *ua, const char *cmd)
       case 0:                         /* Job */
       case 1:                         /* JobId */
          if (get_job_dbr(ua, &jr)) {
-            if (acl_access_ok(ua, Job_ACL, jr.Name)) {
+            if (acl_access_ok(ua, Job_ACL, jr.Name) &&
+                acl_access_ok(ua, Client_ACL, jr.Client))
+            {
                char jobid[50];
                edit_int64(jr.JobId, jobid);
                purge_files_from_jobs(ua, jobid);
+            } else {
+               ua->error_msg(_("Invalid jobid\n"));
             }
          }
          return 1;