You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2021/11/30 22:37:31 UTC

[GitHub] [trafficcontrol] ocket8888 commented on issue #2488: Create a capability that can be used to secure API values

ocket8888 commented on issue #2488:
URL: https://github.com/apache/trafficcontrol/issues/2488#issuecomment-983082395


   No. That's actually kind of an important detail we missed. With Permissions checking disabled, anyone with priv_level >= 30 can see "secure" Parameter Values. If you turn on Permissions checking, that doesn't change and there's no Permission you can take away from someone to hide them or give someone to show those Values. That should be fixed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org