[Pki-devel] [PATCH] 165 - fix auth and authz for Profiles REST API.

Ade Lee alee at redhat.com
Thu Oct 10 03:16:04 UTC 2013


On Wed, 2013-10-09 at 16:42 -0500, Endi Sukma Dewata wrote:
> On 10/8/2013 4:38 PM, Ade Lee wrote:
> > Pretty straightforward patch to fix Profiles REST API auth and authz.
> >
> > Please review,
> > Ade
> 
> Just one question, is there any difference between 
> <certServer.ca.request.profile,approve> and <certServer.ca.profile,approve>?
> 
> If the code is using the right ACL then ACK.
> 

You are correct = certServer.ca.profile,approve = is the correct ACL. I
also added ACLMappings for profile.read and  profile.list, and pushed to
master.  Please take a look at the new auth.properties.

Ade






More information about the Pki-devel mailing list