zoneminder

mirror/zoneminder

0 Fork 0

mirror of https://github.com/ZoneMinder/zoneminder.git synced 2026-10-02 15:35:09 -04:00

Files

T

History

Isaac ConnorandClaude Opus 5.5 768abdd5e3 fix: require edit on the monitor to change its alarm state

The API alarm action and ajax/alarm.php checked no per-monitor
permission and relied on zmu, which only requires that the user can see
the monitor. A user with view on a monitor could force, cancel or disable
its alarms. Changing alarm state now needs Monitor::canEdit(), and the
API status query needs canView().

Monitors API edit and add also pin the record id, so an Id in the body
cannot redirect the save to another monitor.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-29 17:54:25 -04:00

Config

fix: include ZoneMinder version in CakePHP cache prefix

2026-09-11 20:36:03 -04:00

Console

further merges from cakephp 2.10.8

2018-03-21 13:09:55 -04:00

Controller

fix: require edit on the monitor to change its alarm state

2026-09-29 17:54:25 -04:00

Model

fix: use only the filename part of DefaultVideo in the API event fileSize()