Uploaded image for project: 'RecordService (READ-ONLY)'
  1. RecordService (READ-ONLY)
  2. RS-3

Enforce restriction on ZK paths

          Details

          • Type: Bug
          • Status: Resolved
          • Priority: Major
          • Resolution: Fixed
          • Affects Version/s: 0.2.0
          • Fix Version/s: 0.3.0
          • Component/s: Server

            Description

            Currently, for ZK paths being used in RecordService, there's no protection. In CSD the ACL is set to world:anyone:cdrwa. This could be potential security hole since someone can get the delegation token from these paths.

              Attachments

                Activity

                  People

                  • Assignee:
                    sunchao Chao Sun
                    Reporter:
                    sunchao Chao Sun
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: