aeolus security - round 2

Mo Morsi mmorsi at redhat.com
Thu May 17 13:39:54 UTC 2012


This patchset contains the remaining patches from the first set
rebased against the current head with the whitespace errors removed.

Additionally it incorporates more fixes from the list of tasks
from the controller audit, specifically:

  * ensuring user has access to hwps retrieved

  * verifying privileges on instances retrieved in an edge case
    where it previously wasn't handled

  * requiring access to config_server's provider account to test
    the connection

  * requiring Privilege::PRIV_VIEW to access roles

  * require access to a realms provider when accessing realms

  * correctly setting provider_account in provider_accounts_controller
    destroy method (previously wasn't set but was never caught as we
    currently using multi_destroy instead of destroy)



More information about the aeolus-devel mailing list