mirror/zoneminder

0 Fork 0

mirror of https://github.com/ZoneMinder/zoneminder.git synced 2026-10-02 15:35:09 -04:00

Files

T

History

Isaac ConnorandClaude Opus 5.5 768abdd5e3 fix: require edit on the monitor to change its alarm state

The API alarm action and ajax/alarm.php checked no per-monitor
permission and relied on zmu, which only requires that the user can see
the monitor. A user with view on a monitor could force, cancel or disable
its alarms. Changing alarm state now needs Monitor::canEdit(), and the
API status query needs canView().

Monitors API edit and add also pin the record id, so an Id in the body
cannot redirect the save to another monitor.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-29 17:54:25 -04:00

..

fix: require edit on the monitor to change its alarm state

2026-09-29 17:54:25 -04:00

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

.editorconfig

Moved the api to underneath the web directory

2014-04-29 20:41:04 +00:00

build.properties

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

build.xml

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

CMakeLists.txt

Update CMakeLists.txt

2017-05-03 12:35:54 -05:00

composer.json

fix: remove vulnerable phpunit dev dependency (CVE-2026-24765)

2026-02-11 21:59:03 -05:00

CONTRIBUTING.md

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

index.php

Upgrade cakephp to 2.10.24

2021-03-31 12:11:12 -04:00

README.md

Text corrections

2023-08-27 02:00:59 +02:00

README.md

ZoneMinder API

This is the ZoneMinder API. It should be, for now, installed under the webroot e.g. /api.

app/Config/database.php.default must be configured and copied to app/Config/database.php

In addition, Security.salt and Security.cipherSeed in app/Config/core.php should be changed.

The API can run on a dedicated / separate instance, so long as it can access the database as configured in app/Config/database.php