]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-ci.git/commit
projects / ceph-ci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 49d8fad) | patch
mon: enforce cap checks upfront for map subscriptions
authorPatrick Donnelly <pdonnell@ibm.com>
Thu, 28 May 2026 15:15:26 +0000 (11:15 -0400)
committerPatrick Donnelly <pdonnell@ibm.com>
Fri, 29 May 2026 19:36:58 +0000 (15:36 -0400)
commit83fb6a5e3084c186c5d6184b97050bcd3af2a514
treec715b8c7f2cd71262f00c0a7104aa041931cc68etree | snapshot
parent49d8fadaac1f173ec2989cf2e2380ac1fdfa7bc2commit | diff
mon: enforce cap checks upfront for map subscriptions

Move cap validation for mdsmap, fsmap, osdmap, osd_pg_creates, and kv to
the beginning of handle_subscribe. This prevents clients with
insufficient privileges from initiating unauthorized map subscriptions.

Fixes: https://tracker.ceph.com/issues/76964
Signed-off-by: Patrick Donnelly <pdonnell@ibm.com>
src/mon/Monitor.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.