[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
- **status**: review -- fixed - **Comment**: opensaf-4.5.x : changeset: 5782:8b7f5de7bd3a branch: opensaf-4.5.x parent: 5780:9ac53ee22ac2 user:Zoran Milinkovic zoran.milinko...@ericsson.com date:Tue Sep 09 13:30:56 2014 +0200 summary: imm: add a validation for accessControlMode [#1008] -- default(4.6) : changeset: 5783:6799e094d3b2 tag: tip parent: 5779:6c62a01ef630 user:Zoran Milinkovic zoran.milinko...@ericsson.com date:Tue Sep 09 13:30:56 2014 +0200 summary: imm: add a validation for accessControlMode [#1008] --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** fixed **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Tue Sep 09, 2014 01:50 PM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'accessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation (meaning local to the modify operation) can be done here because there is no inter-object relation from this attribute with any other imm object (currently) in the imm model. Create operations are not an issue because the immsv already rejects creates of instances of either class 'OpensafImm' or 'SaImmMngt'. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191iu=/4140/ostg.clktrk___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
- **status**: accepted -- review - **Comment**: https://sourceforge.net/p/opensaf/mailman/message/32811953/ --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** review **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Fri Sep 05, 2014 07:43 AM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'accessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation (meaning local to the modify operation) can be done here because there is no inter-object relation from this attribute with any other imm object (currently) in the imm model. Create operations are not an issue because the immsv already rejects creates of instances of either class 'OpensafImm' or 'SaImmMngt'. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce. Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191iu=/4140/ostg.clktrk___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
- Description has changed: Diff: --- old +++ new @@ -1,6 +1,10 @@ Validation logic should be added to ImmModel::ccbObjectmodify checking -that updates to the 'ccessControlMode' attribute in the OpensAF service +that updates to the 'accessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. -Local validation can be done here because there is no inter-object relation -from this attribute with anything else (currently) in the imm model. +Local validation (meaning local to the modify operation) can be done here +because there is no inter-object relation from this attribute with any other +imm object (currently) in the imm model. + +Create operations are not an issue because the immsv already rejects creates +of instances of either class 'OpensafImm' or 'SaImmMngt'. --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** accepted **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Wed Aug 27, 2014 08:54 AM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'accessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation (meaning local to the modify operation) can be done here because there is no inter-object relation from this attribute with any other imm object (currently) in the imm model. Create operations are not an issue because the immsv already rejects creates of instances of either class 'OpensafImm' or 'SaImmMngt'. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
This means the validation code needs acces to the user id for the client. Needs to be added to client_node srtuct in IMMND. --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** accepted **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Wed Aug 27, 2014 05:27 AM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'ccessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation can be done here because there is no inter-object relation from this attribute with anything else (currently) in the imm model. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
The info is already there, check the validation I did for accessControlMode --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** accepted **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Wed Aug 27, 2014 08:53 AM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'ccessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation can be done here because there is no inter-object relation from this attribute with anything else (currently) in the imm model. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
- **status**: unassigned -- accepted - **assigned_to**: Zoran Milinkovic --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** accepted **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Fri Aug 22, 2014 01:52 PM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'ccessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation can be done here because there is no inter-object relation from this attribute with anything else (currently) in the imm model. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
changes needed: - restrict all changes to the IMM OpenSAF service object to root. Not only accessControlMode but including authorizedGroup and longDnsAllowed. A valid group name can be checked with getgrnam(). --- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** accepted **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Tue Aug 26, 2014 02:40 PM UTC **Owner:** Zoran Milinkovic Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'ccessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation can be done here because there is no inter-object relation from this attribute with anything else (currently) in the imm model. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
[tickets] [opensaf:tickets] #1008 IMM: Changes to access control attribute should be local validated
--- ** [tickets:#1008] IMM: Changes to access control attribute should be local validated** **Status:** unassigned **Milestone:** 4.5.0 **Created:** Fri Aug 22, 2014 01:52 PM UTC by Anders Bjornerstedt **Last Updated:** Fri Aug 22, 2014 01:52 PM UTC **Owner:** nobody Validation logic should be added to ImmModel::ccbObjectmodify checking that updates to the 'ccessControlMode' attribute in the OpensAF service object are in the value range of the enum defined for it. Local validation can be done here because there is no inter-object relation from this attribute with anything else (currently) in the imm model. --- Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is subscribed to https://sourceforge.net/p/opensaf/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.-- Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/___ Opensaf-tickets mailing list Opensaf-tickets@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
