[
https://issues.apache.org/jira/browse/HDDS-16274?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fabian Morgan updated HDDS-16274:
---------------------------------
Status: Patch Available (was: Open)
> [STS] Tighten session policy validation
> ---------------------------------------
>
> Key: HDDS-16274
> URL: https://issues.apache.org/jira/browse/HDDS-16274
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Fabian Morgan
> Assignee: Fabian Morgan
> Priority: Major
>
> There are edge cases in the IAM session policy validation that need to be
> addressed, including but not limited to the following:
> 1) Duplicate fields in one statement, such as Effect, Action, or Resource
> must not be allowed
> 2) Incorrect shape/values must be disallowed. For example, null for Effect,
> [] for Statement, [] for Resource, duplicate s3:prefix, non-homogeneous array
> value of s3:prefix, etc.
> 3) Unsupported fields in a statement must be disallowed, such as NotAction.
> 4) Missing required fields in Statement, such as missing Action, or Resource,
> etc must be disallowed.
> This ticket tightens the validation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
