You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@teaclave.apache.org by GitBox <gi...@apache.org> on 2022/02/11 07:30:56 UTC
[GitHub] [incubator-teaclave] qinkunbao opened a new issue #624: `list_functions` and `get_function` have different access controls
qinkunbao opened a new issue #624:
URL: https://github.com/apache/incubator-teaclave/issues/624
`list_functions` and `get_function` have different access controls. For example,
`list_functions` allows `PlatformAdmin` to get every available functions stored in the database.
https://github.com/baiduxlab/incubator-teaclave/blob/de285671c38c73bf57818573b51f555b49050ea8/services/management/enclave/src/service.rs#L475
If a function is not public, `get_function` only allows `FunctionOwner` to get the description of such a function.
https://github.com/baiduxlab/incubator-teaclave/blob/de285671c38c73bf57818573b51f555b49050ea8/services/management/enclave/src/service.rs#L348
If a user (any roles) can get a function id through `list_functions`, the user should be able to get the description of this function through this function id as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@teaclave.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@teaclave.apache.org
For additional commands, e-mail: notifications-help@teaclave.apache.org
[GitHub] [incubator-teaclave] mssun closed issue #624: `list_functions` and `get_function` have different access controls
Posted by GitBox <gi...@apache.org>.
mssun closed issue #624:
URL: https://github.com/apache/incubator-teaclave/issues/624
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@teaclave.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@teaclave.apache.org
For additional commands, e-mail: notifications-help@teaclave.apache.org