-
Type:
Bug
-
Status:
Closed
-
Priority:
Medium
-
Resolution:
Done
-
-
-
Module:
BenAdmin
- Security
-
-
Item State:
Production Complete
- Closed
-
Issue Importance:
Must Have
URL:
https://wt-stage.harbinger.in/Assets/Temp/d4b28f08-dfb5-4923-850c-c53bac2383f6.pdf
Description:
login with employee credentials and in confirmation statement there is
Option to export pdf. This link can be directly accessed and viewed from different machines without Credentials.
Resolution:
Restrict all post login pages from getting accessed directly.
Authorization of the user specific resource must be implemented and publicly they should not be accessible
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"ae404cdb-7328-453d-8352-457694c441a2","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1323.4000000059605,"redirectCount":0,"resourceLoadedEnd":1295.5999999940395,"resourceLoadedStart":295.40000000596046,"resourceTiming":[{"duration":324.09999999403954,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":295.40000000596046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":295.40000000596046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":619.5,"responseStart":0,"secureConnectionStart":0},{"duration":324.30000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":295.59999999403954,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":295.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":619.9000000059605,"responseStart":0,"secureConnectionStart":0},{"duration":324.69999998807907,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":295.80000001192093,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":295.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":620.5,"responseStart":0,"secureConnectionStart":0},{"duration":324.7999999821186,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":295.80000001192093,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":295.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":620.5999999940395,"responseStart":0,"secureConnectionStart":0},{"duration":325.2999999821186,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":295.90000000596046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":295.90000000596046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":621.1999999880791,"responseStart":0,"secureConnectionStart":0},{"duration":420.30000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":296,"connectEnd":296,"connectStart":296,"domainLookupEnd":296,"domainLookupStart":296,"fetchStart":296,"redirectEnd":0,"redirectStart":0,"requestStart":296,"responseEnd":716.3000000119209,"responseStart":716.3000000119209,"secureConnectionStart":296},{"duration":463.60000002384186,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":296.19999998807907,"connectEnd":296.19999998807907,"connectStart":296.19999998807907,"domainLookupEnd":296.19999998807907,"domainLookupStart":296.19999998807907,"fetchStart":296.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":296.19999998807907,"responseEnd":759.8000000119209,"responseStart":759.8000000119209,"secureConnectionStart":296.19999998807907},{"duration":459.90000000596046,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":296.19999998807907,"connectEnd":296.19999998807907,"connectStart":296.19999998807907,"domainLookupEnd":296.19999998807907,"domainLookupStart":296.19999998807907,"fetchStart":296.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":296.19999998807907,"responseEnd":756.0999999940395,"responseStart":756.0999999940395,"secureConnectionStart":296.19999998807907},{"duration":466.59999999403954,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":296.30000001192093,"connectEnd":296.30000001192093,"connectStart":296.30000001192093,"domainLookupEnd":296.30000001192093,"domainLookupStart":296.30000001192093,"fetchStart":296.30000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":296.30000001192093,"responseEnd":762.9000000059605,"responseStart":762.9000000059605,"secureConnectionStart":296.30000001192093},{"duration":468,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":296.40000000596046,"connectEnd":296.40000000596046,"connectStart":296.40000000596046,"domainLookupEnd":296.40000000596046,"domainLookupStart":296.40000000596046,"fetchStart":296.40000000596046,"redirectEnd":0,"redirectStart":0,"requestStart":296.40000000596046,"responseEnd":764.4000000059605,"responseStart":764.4000000059605,"secureConnectionStart":296.40000000596046},{"duration":469.5,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":296.59999999403954,"connectEnd":296.59999999403954,"connectStart":296.59999999403954,"domainLookupEnd":296.59999999403954,"domainLookupStart":296.59999999403954,"fetchStart":296.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":296.59999999403954,"responseEnd":766.0999999940395,"responseStart":766.0999999940395,"secureConnectionStart":296.59999999403954},{"duration":468.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":296.59999999403954,"connectEnd":296.59999999403954,"connectStart":296.59999999403954,"domainLookupEnd":296.59999999403954,"domainLookupStart":296.59999999403954,"fetchStart":296.59999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":296.59999999403954,"responseEnd":765.4000000059605,"responseStart":765.4000000059605,"secureConnectionStart":296.59999999403954},{"duration":478.39999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":296.80000001192093,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":296.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":775.1999999880791,"responseStart":0,"secureConnectionStart":0},{"duration":478.40000000596046,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":296.90000000596046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":296.90000000596046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":775.3000000119209,"responseStart":0,"secureConnectionStart":0},{"duration":470.5,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/e80c7a6aee0fa86c2b1a716575a614aa/shortcuts.js?context=issuenavigation&context=issueaction","startTime":296.90000000596046,"connectEnd":296.90000000596046,"connectStart":296.90000000596046,"domainLookupEnd":296.90000000596046,"domainLookupStart":296.90000000596046,"fetchStart":296.90000000596046,"redirectEnd":0,"redirectStart":0,"requestStart":296.90000000596046,"responseEnd":767.4000000059605,"responseStart":767.3000000119209,"secureConnectionStart":296.90000000596046},{"duration":471.30000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":297.09999999403954,"connectEnd":297.09999999403954,"connectStart":297.09999999403954,"domainLookupEnd":297.09999999403954,"domainLookupStart":297.09999999403954,"fetchStart":297.09999999403954,"redirectEnd":0,"redirectStart":0,"requestStart":297.09999999403954,"responseEnd":768.4000000059605,"responseStart":768.4000000059605,"secureConnectionStart":297.09999999403954},{"duration":995.1000000238419,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":297.69999998807907,"connectEnd":297.69999998807907,"connectStart":297.69999998807907,"domainLookupEnd":297.69999998807907,"domainLookupStart":297.69999998807907,"fetchStart":297.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":297.69999998807907,"responseEnd":1292.800000011921,"responseStart":1292.800000011921,"secureConnectionStart":297.69999998807907},{"duration":997.7999999821186,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":297.80000001192093,"connectEnd":297.80000001192093,"connectStart":297.80000001192093,"domainLookupEnd":297.80000001192093,"domainLookupStart":297.80000001192093,"fetchStart":297.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":297.80000001192093,"responseEnd":1295.5999999940395,"responseStart":1295.5999999940395,"secureConnectionStart":297.80000001192093},{"duration":237.59999999403954,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":1065.5999999940395,"connectEnd":1065.5999999940395,"connectStart":1065.5999999940395,"domainLookupEnd":1065.5999999940395,"domainLookupStart":1065.5999999940395,"fetchStart":1065.5999999940395,"redirectEnd":0,"redirectStart":0,"requestStart":1065.5999999940395,"responseEnd":1303.199999988079,"responseStart":1303.199999988079,"secureConnectionStart":1065.5999999940395}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":216,"responseStart":289,"responseEnd":290,"domLoading":293,"domInteractive":1415,"domContentLoadedEventStart":1415,"domContentLoadedEventEnd":1498,"domComplete":1636,"loadEventStart":1636,"loadEventEnd":1638,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"d701f73a29c3b0","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":46,"dbReadsTimeInMs":3,"dbConnsTimeInMs":4,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
PCORI is downloaded without issue for Partner Login and Admin Login.
Deepali Tidke Please verify confirmation statement report using all log in.