GitHub user rob05c opened a pull request:
https://github.com/apache/incubator-trafficcontrol/pull/645
Change Traffic Ops `/update` to `priv > 10` to facilitate minimal syncds
priveleges
This specifically allows creating a role with privilege level between
10 and 20 (e.g. 11), for ORT/syncds, which can only access GET routes
plus POST /update in order to minimize access privileges.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/rob05c/incubator-trafficcontrol
to-syncdsminimizeprivs
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-trafficcontrol/pull/645.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #645
commit df4a45f81be5a8643bcfa4698d2b2be5e8a4bb0a
Author: Robert Butts
Date: 2017-06-05T22:07:23Z
Change TO /update to allow priv_level > 10
This specifically allows creating a role with privilege level between
10 and 20 (e.g. 11), for ORT/syncds, which can only access GET routes
plus POST /update in order to minimize access privileges.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---