#28685 Authorization Issues in Model-Based Search

enhancement

minor

#29334

Status code as argument for responses in REST requests

defect

major

#29223

Commands configured directly in the dialog cannot be granted permissions.

#29269

Kafka: Error when handling null messages

#29272

Import in help editor does not work

#29325

Generated JSON schema marks a non-nullable layout-template property (dialog title) as nullable/optional

#29338

CreateTLSingletonProcessor creates duplicate annotations

#29373

Buttons Do Not Respond to Programmatic DOM Clicks (UI Test Automation with Playwright)

minor

#28685

Authorization Issues in Model-Based Search

#29009

Selection in tree invisible if "Expand on selection" is not selected

#29322

Configuration Command Undo vs List of changes

#29330

TreeTableComponent / TreeComponent loses state on invalidate

#29331

Zoom level to be retained

#29339

Failed migration in #28305

#29340

TL Script: Optimizing database queries with transient objects fails

#29367

Error in the TL Script Compiler when parsing HTML literals as the first expression in a block

#29371

Values of macro attributes are not displayed

#29372

Flowchart: Problems with a compact tree layout and overlapping elements in combination with a zigzag display

#29379

Script Recorder: Details Can No Longer Be Edited After Moving a Selected Action

defect

minor

#28685

Authorization Issues in Model-Based Search

Security

The "Save" button (unlike the "Save As" button next to it) is defined as a system command. This is incorrect. As a result, anyone can modify search queries published by others even without the appropriate permissions:

Permissions for the details dialog are controlled via “Show Search Results Details.” The “Export” permission is evaluated correctly here. The “Read” permission, however, is not. Even if you uncheck “Read,” the details dialog can still be opened:

Either the “Read” setting must also be correctly taken into account, or the detail dialog should generally not be handled separately but rather via the settings in “Model-Based Search.”