Task #2644: Validate that restricted token is actually restricted - Arvados

Actions

Task #2644

closed

Idea #2524: [Sample clients] Third party can generate a "ready to ingest" event using an API token scoped to a specific project.

Validate that restricted token is actually restricted

Added by Peter Amstutz almost 11 years ago. Updated over 8 years ago.

Status:

Resolved

Priority:

Normal

Assigned To:

Target version:

-

Actions

#1

Updated by Brett Smith almost 11 years ago

Assigned To changed from Peter Amstutz to Brett Smith

Actions

#2

Updated by Brett Smith almost 11 years ago

Status changed from New to Resolved
Start date set to 05/07/2014
Remaining (hours) changed from 4.0 to 0.0

Peter wrote this task and then I ended up taking it. I think it's done? There are multiple tests that check that scoped API tokens only do not have access to resources outside their scopes.

Actions

Also available in: Atom PDF