[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Josh Cooper. Assignee changed from Jeff Weiss to Josh Cooper Keywords set to ssl Branch changed from https://github.com/puppetlabs/puppet/pull/1232 to https://github.com/puppetlabs/puppet/pull/1248 Bug #17129: SSL REST A

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Andrew Parker. Target version set to 2.7.20 Bug #17129: SSL REST API bails out completely on permissions errors https://projects.puppetlabs.com/issues/17129#change-75259 Author: Max Martin Status: In Topic Branch Pendin

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Jeff Weiss. I believe we can add a FileTest.readable? to lib/puppet/indrector/ssl_file#search to fix this. Bug #17129: SSL REST API bails out completely on permissions errors https://projects.puppetlabs.com/issues/17129#

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Jeff Weiss. I believe the desired behaviour is * no error message to client about "bad" objects * returned collection contains everything except "bad" objects * "bad" objects logged on server side Bug #17129: SSL REST API

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Nigel Kersten. Andy, this gist shows the bad bits: where we have the File read without any defensive behavior at all. This "fix" means you end up returning objects with no parameters, rather than no object at all.

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Max Martin. I'm not particularly fussed about what kind of information it sends back about the .pem file with bad ownership, in fact I would be happy if it were completely omitted from the results. What's bad is that no information about the REST of the pendin

[Puppet - Bug #17129] SSL REST API bails out completely on permissions errors

Issue #17129 has been updated by Max Martin. To clarify, `pe-puppet` would be the proper owner here. I manually changed one to be owned by `peadmin` in an attempt to break things (though they ended up breaking in a way that was unexpected to me, hence the report). -