Project

General

Profile

Actions
Copy link

Task #2653

closed

Feature #2328: Verify and generate permission hints in Keep

Permissions command-line flags

Added by Tim Pierce about 10 years ago. Updated almost 10 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Tim Pierce
Target version:
2014-05-07 Storing and Organizing Data

Description

Desired command line arguments to control permissions:
  • --enable-permissions= true/false to enable or disable permission enforcement
    • For transition, maybe support a --generate-permissions flag and a --enforce-permissions flag.
    • Alternatively, make Keep always generate permission tokens, but only enforce them when the perms flag is turned on.
    • Permissions are always required for DELETE
  • --privileged-ip specifies IP addresses to be considered superuser.
    • If permissions are disabled, index (GET /index.txt) and DELETE do not work unless remote address matches --privileged-ip command line argument
  • --signature-ttl=num_seconds to control expiry time of signatures
  • --signature-key-fd=fdnum to read signing key from given file descriptor
Actions
Copy link

Also available in: Atom PDF