You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@usergrid.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2015/09/10 23:41:46 UTC
[jira] [Commented] (USERGRID-645) Update superuser to allow all
system access
[ https://issues.apache.org/jira/browse/USERGRID-645?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14739654#comment-14739654 ]
ASF GitHub Bot commented on USERGRID-645:
-----------------------------------------
GitHub user mdunker opened a pull request:
https://github.com/apache/usergrid/pull/380
USERGRID-645: fix superuser access via token
1. Superuser access via token now works. Some code was checking for hardcoded string "sysadmin" -- superuser role is now "service-admin".
2. Superuser token should now be granted access to all orgs and apps.
3. Locked down org config GET/PUT to superusers only.
Basic auth superuser still does not have access to orgs/apps. Org config GET/PUT requires both org access to specified org and superuser access, so token must be used for org config.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mdunker/usergrid USERGRID-645
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/usergrid/pull/380.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #380
----
commit ac1db7e33326076df13ca77610416e4d1dcc06aa
Author: Mike Dunker <md...@apache.org>
Date: 2015-09-10T21:35:30Z
USERGRID-645: fix superuser access via token
1. Superuser access via token now works. Some code was checking for hardcoded string "sysadmin" -- superuser role is now "service-admin".
2. Superuser token should now be granted access to all orgs and apps.
3. Locked down org config GET/PUT to superusers only.
Basic auth superuser still does not have access to orgs/apps. Org config GET/PUT requires both org access to specified org and superuser access, so token must be used for org config.
----
> Update superuser to allow all system access
> -------------------------------------------
>
> Key: USERGRID-645
> URL: https://issues.apache.org/jira/browse/USERGRID-645
> Project: Usergrid
> Issue Type: Story
> Components: Stack
> Reporter: Todd Nine
> Assignee: Mike Dunker
>
> Currently superuser access does not allow access to all resources, as a superuser this should be allowed.
> If SuperUser is evaluated as a Role, this may be a more optimal solution from a management perspective.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)