Serge Huber created UNOMI-977:
---------------------------------
Summary: Restrict router import/export configuration to system
administrators
Key: UNOMI-977
URL: https://issues.apache.org/jira/browse/UNOMI-977
Project: Apache Unomi
Issue Type: Improvement
Components: unomi(-core)
Affects Versions: unomi-3.1.0
Reporter: Serge Huber
Assignee: Serge Huber
Fix For: unomi-3.1.0
h2. Current behaviour
The router import and export configuration endpoints are reachable by any
authenticated caller. A
configuration carries a Camel source/destination URI, so it can reach the
filesystem and remote
endpoints — host-impacting, not confined to a tenant's data plane.
h2. Change
{{ImportConfigurationServiceEndPoint}} and
{{ExportConfigurationServiceEndPoint}} require
{{UnomiRoles.ADMINISTRATOR}}, on the oneshot and multipart upload paths as well
as the CRUD ones.
h2. Tests
* {{RouterConfigurationEndPointRoleTest}} — the role annotations are present.
* {{RouterEndpointRoleSecurityIT}} — four HTTP-level checks that a tenant
private key is rejected,
covering import, export, oneshot upload and oneshot export.
h2. Backport
Not required, for the same reason as the Groovy endpoint: 3.0.x and 2.7.x gate
these through
{{AuthorizingInterceptor}}'s admin-only {{globalRoles}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
