xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-14 10:13:49 +00:00
Code Issues Projects Releases Wiki Activity

Other than skipauth type users (unix domain socket root/confluent), no longer allow confluent user addition/manipulation.

Browse Source
This commit is contained in:
Jarrod Johnson
2026-06-25 09:55:09 -04:00
parent 78ffd509c9
commit 46fbc11a93
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confluent_server/confluent/auth.py
+2
View File
@@ -208,6 +208,8 @@ def authorize(name, element, tenant=False, operation='create',
# even if pam does authentication.
if operation not in ('create', 'start', 'update', 'retrieve', 'delete', None):
return False
if operation != 'retrieve' and (element.startswith('/users') or element.startswith('/usergroups')):
return False
user, tenant = _get_usertenant(name, tenant)
if tenant is not None and not configmanager.is_tenant(tenant):
return False