From ccefec7360f942d92e749264c5deaa3ca39cb50f Mon Sep 17 00:00:00 2001 From: Juan Leyva Date: Wed, 30 Sep 2015 09:34:23 +0200 Subject: [PATCH] MDL-50613 webservice: Remove risk bit masks for Web Service protocols This will prevent to show a 'Critical' status in security overview report when mobile services are enabled --- webservice/amf/db/access.php | 1 - webservice/amf/version.php | 2 +- webservice/rest/db/access.php | 1 - webservice/rest/version.php | 2 +- webservice/soap/db/access.php | 1 - webservice/soap/version.php | 2 +- webservice/xmlrpc/db/access.php | 1 - webservice/xmlrpc/version.php | 2 +- 8 files changed, 4 insertions(+), 8 deletions(-) diff --git a/webservice/amf/db/access.php b/webservice/amf/db/access.php index a984f57312c..0ba462f92d5 100644 --- a/webservice/amf/db/access.php +++ b/webservice/amf/db/access.php @@ -27,7 +27,6 @@ $capabilities = array( 'webservice/amf:use' => array( - 'riskbitmask' => RISK_CONFIG | RISK_DATALOSS | RISK_SPAM | RISK_PERSONAL | RISK_XSS, 'captype' => 'read', // in fact this may be considered read and write at the same time 'contextlevel' => CONTEXT_COURSE, // the context level should be probably CONTEXT_MODULE 'archetypes' => array( diff --git a/webservice/amf/version.php b/webservice/amf/version.php index 8138ef3c9e5..ae62aa5a0e2 100644 --- a/webservice/amf/version.php +++ b/webservice/amf/version.php @@ -25,6 +25,6 @@ defined('MOODLE_INTERNAL') || die(); -$plugin->version = 2014111000; // The current plugin version (Date: YYYYMMDDXX) +$plugin->version = 2014111001; // The current plugin version (Date: YYYYMMDDXX) $plugin->requires = 2014110400; // Requires this Moodle version $plugin->component = 'webservice_amf'; // Full name of the plugin (used for diagnostics) diff --git a/webservice/rest/db/access.php b/webservice/rest/db/access.php index 551e8df3d18..62949b40918 100644 --- a/webservice/rest/db/access.php +++ b/webservice/rest/db/access.php @@ -27,7 +27,6 @@ $capabilities = array( 'webservice/rest:use' => array( - 'riskbitmask' => RISK_CONFIG | RISK_DATALOSS | RISK_SPAM | RISK_PERSONAL | RISK_XSS, 'captype' => 'read', // in fact this may be considered read and write at the same time 'contextlevel' => CONTEXT_COURSE, // the context level should be probably CONTEXT_MODULE 'archetypes' => array( diff --git a/webservice/rest/version.php b/webservice/rest/version.php index db11256a4d0..9778ea9cbae 100644 --- a/webservice/rest/version.php +++ b/webservice/rest/version.php @@ -25,6 +25,6 @@ defined('MOODLE_INTERNAL') || die(); -$plugin->version = 2014111000; // The current plugin version (Date: YYYYMMDDXX) +$plugin->version = 2014111001; // The current plugin version (Date: YYYYMMDDXX) $plugin->requires = 2014110400; // Requires this Moodle version $plugin->component = 'webservice_rest'; // Full name of the plugin (used for diagnostics) diff --git a/webservice/soap/db/access.php b/webservice/soap/db/access.php index a3a90a3e45e..de96adfd285 100644 --- a/webservice/soap/db/access.php +++ b/webservice/soap/db/access.php @@ -27,7 +27,6 @@ $capabilities = array( 'webservice/soap:use' => array( - 'riskbitmask' => RISK_CONFIG | RISK_DATALOSS | RISK_SPAM | RISK_PERSONAL | RISK_XSS, 'captype' => 'read', // in fact this may be considered read and write at the same time 'contextlevel' => CONTEXT_COURSE, // the context level should be probably CONTEXT_MODULE 'archetypes' => array( diff --git a/webservice/soap/version.php b/webservice/soap/version.php index 5d0628a0434..053f805b58c 100644 --- a/webservice/soap/version.php +++ b/webservice/soap/version.php @@ -25,6 +25,6 @@ defined('MOODLE_INTERNAL') || die(); -$plugin->version = 2014111000; // The current plugin version (Date: YYYYMMDDXX) +$plugin->version = 2014111001; // The current plugin version (Date: YYYYMMDDXX) $plugin->requires = 2014110400; // Requires this Moodle version $plugin->component = 'webservice_soap'; // Full name of the plugin (used for diagnostics) diff --git a/webservice/xmlrpc/db/access.php b/webservice/xmlrpc/db/access.php index 1c71a8ce87e..3f4f90e4a72 100644 --- a/webservice/xmlrpc/db/access.php +++ b/webservice/xmlrpc/db/access.php @@ -27,7 +27,6 @@ $capabilities = array( 'webservice/xmlrpc:use' => array( - 'riskbitmask' => RISK_CONFIG | RISK_DATALOSS | RISK_SPAM | RISK_PERSONAL | RISK_XSS, 'captype' => 'read', // in fact this may be considered read and write at the same time 'contextlevel' => CONTEXT_COURSE, // the context level should be probably CONTEXT_MODULE 'archetypes' => array( diff --git a/webservice/xmlrpc/version.php b/webservice/xmlrpc/version.php index 2ccbb7e7a4b..76fc06cd483 100644 --- a/webservice/xmlrpc/version.php +++ b/webservice/xmlrpc/version.php @@ -25,6 +25,6 @@ defined('MOODLE_INTERNAL') || die(); -$plugin->version = 2014111000; // The current plugin version (Date: YYYYMMDDXX) +$plugin->version = 2014111001; // The current plugin version (Date: YYYYMMDDXX) $plugin->requires = 2014110400; // Requires this Moodle version $plugin->component = 'webservice_xmlrpc'; // Full name of the plugin (used for diagnostics)