You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "Attila Doroszlai (Jira)" <ji...@apache.org> on 2024/08/13 13:57:00 UTC

[jira] [Updated] (HDDS-11040) Disable REST endpoint for S3 secret manipulation by username

     [ https://issues.apache.org/jira/browse/HDDS-11040?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Attila Doroszlai updated HDDS-11040:
------------------------------------
    Target Version/s: 1.4.1

> Disable REST endpoint for S3 secret manipulation by username
> ------------------------------------------------------------
>
>                 Key: HDDS-11040
>                 URL: https://issues.apache.org/jira/browse/HDDS-11040
>             Project: Apache Ozone
>          Issue Type: Bug
>          Components: s3gateway
>    Affects Versions: 1.4.0
>            Reporter: Ivan Zlenko
>            Assignee: Ivan Zlenko
>            Priority: Critical
>              Labels: patch-available, pull-request-available
>             Fix For: 1.5.0
>
>
> As of now we can revoke and generate secrets for any user using non-admin account via S3Gateway Secret REST endpoint. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org