Project

General

Profile

Actions
Copy link

Tracker #30872

closed

Use proper authorization in controllers

Added by Justin Sherrill about 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
Katello 4.1.0
% Done:

100%

Difficulty:
Triaged:
Yes
Bugzilla link:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Subtasks 17 (0 open — 17 closed)

Bug #30873: Add proper authorization to activation keys controllerClosedJustin SherrillActions
Bug #30874: Fix permissions in environments controllerClosedJames JeffersActions
Bug #30876: Add authorizations for host_collections controllerClosedJeremy LenzActions
Bug #30877: Add authorization for sync_plan controllerClosedSamir JhaActions
Bug #30878: authorization for content credentials controllerClosedJustin SherrillActions
Bug #30879: Add permissions for capsules controller and capsule_content_controllerResolvedJeremy LenzActions
Bug #30881: Add authorization for upstream_subscriptions controllerRejectedJohn MitschActions
Bug #30882: Fix permissions in gpg keys controllerRejectedJames JeffersActions
Bug #30884: Add authorization for Products controllerClosedSamir JhaActions
Bug #31148: add authorization for host_contents controllerRejectedIan BallouActions
Refactor #31150: Fix content view components controller authorizationClosedJustin SherrillActions
Refactor #31151: add authorization for host_debs controllerClosedChris RobertsActions
Bug #31152: add authorization for sync controllerClosedIan BallouActions
Tracker #31153: add authorization for host_module_streams controllerRejected

Actions
Bug #31156: Add authorization for repositories_bulk_actions controllerClosedSamir JhaActions
Bug #31158: Add proper authorization to content view versions controllerClosedJustin SherrillActions
Bug #31159: Add authorization for HostBulkActionsControllerClosedJonathon TurelActions

Related issues 4 (0 open — 4 closed)

Blocked by Katello - Bug #30875: Add authorization for ContentViewsController controllerClosedPartha AjiActions
Blocked by Katello - Bug #30880: Add permission support to validate 404 on denial and multi permissionsClosedPartha AjiActions
Blocked by Katello - Refactor #31146: Add authorization for content_view_filters controllerClosedPartha AjiActions
Blocked by Katello - Bug #31155: Add Authorization for Host Packages ControllerRejectedJonathon TurelActions
Actions
Copy link

Also available in: Atom PDF