Changes to Verify + Ownergate Security
by Devan Goodwin
The problem, consumer principals need to access sub-sets of owner
information, such as:
GET /pools?owner={id}
GET /owners/{key}/pools
In each case, GET implies we need READ_ONLY, and the only parameter we
have to verify on is an owner. So I added an implicit READ_ONLY
permission for an Owner to all ConsumerPrincipals.
This however now means a whole bunch of GET methods in the API which
verify access to an owner will now be available. A consumer principal
can now view info on other consumers in that owner, or history on the
entire owner. This is a problem, if for instance a system was
compromised, and that identity certificate could now be used to gather
some information on the rest of the organization.
My proposal is to add optional 'tags' to the security we're checking,
something akin to: @Verify(Owner.class, tag="pools"), which means we
check for any permission which responds to those parameters. A
permission with no tags will be assumed to provide any tags requested.
If the permission does carry tags, it will only respond if it has the
tag in question. If no tag is requested, then only permissions with no
tags will respond.
Not super pretty, but solves a real problem.
Thoughts?
Devan
12 years, 10 months
Package profiles
by Bryan Kearney
Take a look at this write up:
https://fedorahosted.org/pulp/wiki/PackageProfileUpdate
Based on this work which pradeep did, I believe there will be the
following packages:
python-rhsm gofer
|---pulp-client--------------------|
|---subscription-manager |
|------katello-C&C-----------------|
and the following features will need to be added across the projects:
- python rhsm will get he code to create the package sets.
- pulp-client will have code to take it and push it to pulp via a plugin
and gofer plugin
- subscription-manager will push up packages whenever facts are pushed up
- candlepin will either need to store, or ignore that packeg profile.
- katello-C&C will re-implement the package set push which is in
pulp-client. The main difference will be using the connection data from
subscription-manager
Any comments on what you think candlepin should do?
-- bk
12 years, 10 months