sergehuber commented on PR #846: URL: https://github.com/apache/unomi/pull/846#issuecomment-5292654032
Superseded. This work has been split into one PR per issue so each can be reviewed, merged and backported independently: - #850 — UNOMI-974: Require an explicit admin and health-check password at startup - #851 — UNOMI-975: Bind a public context request to the profile its own cookie names - #852 — UNOMI-976: Restrict Groovy action upload to system administrators - #853 — UNOMI-977: Restrict router import/export configuration to system administrators - #854 — UNOMI-978: Gate cross-profile merge and systemProperties writes on a trusted caller Together those five carry the whole of this change: every line this branch removed from master is removed by one of them, and the production code is equivalent. The only content not carried forward is the THREAT_MODEL.md and SECURITY.md edits, which were dropped deliberately, and some Groovy hardening that was never in scope here and will get its own ticket. The branch is kept, so nothing here is lost. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
