diff --git a/.changeset/khaki-eggs-provide.md b/.changeset/khaki-eggs-provide.md new file mode 100644 index 0000000000000..75185c6eee7c5 --- /dev/null +++ b/.changeset/khaki-eggs-provide.md @@ -0,0 +1,6 @@ +--- +'@rocket.chat/apps-engine': patch +'@rocket.chat/meteor': patch +--- + +Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) diff --git a/apps/meteor/ee/server/apps/communication/endpoints/appGeneralLogsHandler.ts b/apps/meteor/ee/server/apps/communication/endpoints/appGeneralLogsHandler.ts index e6db29256b6ce..5fe6e5392d479 100644 --- a/apps/meteor/ee/server/apps/communication/endpoints/appGeneralLogsHandler.ts +++ b/apps/meteor/ee/server/apps/communication/endpoints/appGeneralLogsHandler.ts @@ -7,7 +7,7 @@ import { makeAppLogsQuery } from './lib/makeAppLogsQuery'; export const registerAppGeneralLogsHandler = ({ api, _orch }: AppsRestApi) => void api.addRoute( 'logs', - { authRequired: true, permissionRequired: ['manage-apps'], validateParams: isAppLogsProps }, + { authRequired: true, permissionsRequired: ['manage-apps'], validateParams: isAppLogsProps }, { async get() { const { offset, count } = await getPaginationItems(this.queryParams); diff --git a/apps/meteor/ee/server/apps/communication/endpoints/appLogsHandler.ts b/apps/meteor/ee/server/apps/communication/endpoints/appLogsHandler.ts index b1e0103c13fa6..76ed01bcbe4a6 100644 --- a/apps/meteor/ee/server/apps/communication/endpoints/appLogsHandler.ts +++ b/apps/meteor/ee/server/apps/communication/endpoints/appLogsHandler.ts @@ -7,7 +7,7 @@ import { makeAppLogsQuery } from './lib/makeAppLogsQuery'; export const registerAppLogsHandler = ({ api, _manager, _orch }: AppsRestApi) => void api.addRoute( ':id/logs', - { authRequired: true, permissionRequired: ['manage-apps'], validateParams: isAppLogsProps }, + { authRequired: true, permissionsRequired: ['manage-apps'], validateParams: isAppLogsProps }, { async get() { const proxiedApp = _manager.getOneById(this.urlParams.id);