GET /jobs/{id} returns credentials

Bug #1272452 reported by Matthew Farrellee
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Sahara
Fix Released
High
Trevor McKay

Bug Description

similar to https://bugs.launchpad.net/savanna/+bug/1272322

the credentials used to access the job data are readily available in the representation of the job transmitted from the service

NOTE - the python-savannaclient filters out the credentials before displaying them, that code can be removed when this is fixed.

Revision history for this message
Andrew Lazarev (alazarev) wrote :

>NOTE - the python-savannaclient filters out the credentials before displaying them, that code can be removed when this is fixed.

I think that code can be removed even before this is fixed. Client can always request job binaries via REST. Having code preventing that in client is strange.

Changed in savanna:
assignee: nobody → Trevor McKay (tmckay)
milestone: none → icehouse-3
importance: Undecided → Medium
status: New → Confirmed
Changed in savanna:
milestone: icehouse-3 → icehouse-rc1
Changed in savanna:
importance: Medium → High
Changed in sahara:
status: Confirmed → Triaged
Trevor McKay (tmckay)
Changed in sahara:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to sahara (master)

Fix proposed to branch: master
Review: https://review.openstack.org/82863

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to sahara (master)

Reviewed: https://review.openstack.org/82863
Committed: https://git.openstack.org/cgit/openstack/sahara/commit/?id=4da5dbf735165bc568c7e6b2b54de61cd250c03e
Submitter: Jenkins
Branch: master

commit 4da5dbf735165bc568c7e6b2b54de61cd250c03e
Author: Trevor McKay <email address hidden>
Date: Tue Mar 25 12:35:40 2014 -0400

    Filter credentials in jobs returned from REST api

    The 'mains' and 'libs' elements of a Job contain references
    to JobBinary objects, which can contain credentials in the
    'extra' field. Filter 'extra' from 'mains' and 'libs' when
    returning a wrapped Job object.

    Closes-Bug: #1272452
    Change-Id: Ieccadbbda1f081595374469cb938b7bffbc08e17

Changed in sahara:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in sahara:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in sahara:
milestone: icehouse-rc1 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.