[jira] [Work logged] (KNOX-3411) KnoxToken getUserTokens returns every user's token metadata without a caller authorization check

[ASF GitHub Bot (Jira)]

     [ 
https://issues.apache.org/jira/browse/KNOX-3411?focusedWorklogId=1035119&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1035119
 ]

ASF GitHub Bot logged work on KNOX-3411:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 11/Aug/26 13:43
            Start Date: 11/Aug/26 13:43
    Worklog Time Spent: 10m 
      Work Description: github-actions[bot] commented on PR #1344:
URL: https://github.com/apache/knox/pull/1344#issuecomment-5253979828

   ## Test Results
   40 tests   40 ✅  5s ⏱️
    3 suites   0 💤
    3 files     0 ❌
   
   Results for commit 0809e566.
   
   
[test-results]:data:application/gzip;base64,H4sIAN0me2oC/12MyQ7CIBRFf6Vh7YKKUPBnDH19JC+2xTCsjP8uHezg7p5zk/NmjnqM7F6JS8ViprRBl4NN5MeCsmA50nTd+A8eMQP8mSe9itmFs9SfBIbgw2pCHrfitE/BRey9mQ+5mY818MNAqQDjmhuUSqFWV66NMB1KaJQQtWtBmxqgMcraln2+lTN6oP8AAAA=
   




Issue Time Tracking
-------------------

    Worklog Id:     (was: 1035119)
    Time Spent: 20m  (was: 10m)

> KnoxToken getUserTokens returns every user's token metadata without a caller 
> authorization check
> ------------------------------------------------------------------------------------------------
>
>                 Key: KNOX-3411
>                 URL: https://issues.apache.org/jira/browse/KNOX-3411
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 2.1.0, 3.0.0
>            Reporter: Tamás Hanicz
>            Assignee: Tamás Hanicz
>            Priority: Blocker
>          Time Spent: 20m
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)