]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
mgr/dashboard: fix security scopes of some NFS-Ganesha endpoints 37961/head
authorKiefer Chang <kiefer.chang@suse.com>
Tue, 8 Sep 2020 07:41:02 +0000 (15:41 +0800)
committerLaura Paduano <lpaduano@suse.com>
Thu, 5 Nov 2020 09:51:25 +0000 (10:51 +0100)
commit92f69285b41e2be642029b6c2e978f1f8b4da550
tree4dc0269b808198ab5a400ca28da25e7ef84a4bf3
parent0763d1e269ea74cae12ded274f1e889af62da159
mgr/dashboard: fix security scopes of some NFS-Ganesha endpoints

Apply NFS_GANESHA scope to these endpoints:
- `/api/nfs-ganesha/daemon`.
- `/ui-api/nfs-ganesha/*`.

Otherwise, any valid users can access them.

Fixes: https://tracker.ceph.com/issues/47356
Signed-off-by: Kiefer Chang <kiefer.chang@suse.com>
(cherry picked from commit ed123e493cf43e71cb608a31ac8f2a9136f6febf)

 Conflicts:
src/pybind/mgr/dashboard/controllers/nfsganesha.py
 - ReadPermissions between Endpoint and def lsdir;
   def lsdir pylint addition
src/pybind/mgr/dashboard/controllers/nfsganesha.py