fix: require elevate=true for STIG benchmark import (#1340)

NUWCDIVNPT · Jul 30, 2024 · 3abac96 · 3abac96
1 parent 0e343a7
commit 3abac96
Show file tree

Hide file tree

Showing 3 changed files with 329 additions and 121 deletions.
diff --git a/api/source/controllers/STIG.js b/api/source/controllers/STIG.js
@@ -6,6 +6,9 @@ const parsers = require('../utils/parsers.js')
 const STIGService = require(`../service/STIGService`)
 
 module.exports.importBenchmark = async function importManualBenchmark (req, res, next) {
+  if ( !req.query.elevate ) {
+    next(new SmError.PrivilegeError())
+  }
   try {
     const extension = req.file.originalname.substring(req.file.originalname.lastIndexOf(".")+1)
     const clobber = req.query.clobber ?? false

diff --git a/api/source/specification/stig-manager.yaml b/api/source/specification/stig-manager.yaml
@@ -3104,6 +3104,7 @@ paths:
           schema:
             type: boolean
             default: false
+        - $ref: '#/components/parameters/ElevateQuery'
       requestBody:
         required: true
         content: