Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API permissions for specific host #3416

Open
beherit opened this issue Oct 20, 2020 · 6 comments
Open

API permissions for specific host #3416

beherit opened this issue Oct 20, 2020 · 6 comments

Comments

@beherit
Copy link

beherit commented Oct 20, 2020

I looking a way to set specific API permissions for one host. For now e.g. "register" "check_account" "unregister" commands works with all hosts that I have and I don't found way to allow it to run only for specific host. Is it possible?

@licaon-kter
Copy link
Contributor

licaon-kter commented Oct 20, 2020

@beherit
Copy link
Author

beherit commented Oct 20, 2020

@licaon-kter I tested ACLs but this doesn't work for me with API.

@beherit
Copy link
Author

beherit commented Oct 20, 2020

I want something like that: I have 3 hosts a.tld, b.tld and c.tld. When I run API command from account on b.tld I want to allow to run command only for this host. E.g. "register user123 b.tld pass" will be allowed but "register user123 a.tld pass" will be forbidden.

@licaon-kter
Copy link
Contributor

I've edited my post, did you see?

@beherit
Copy link
Author

beherit commented Oct 20, 2020

Yes, this rules doesn't work as I described.

@prefiks
Copy link
Member

prefiks commented Oct 20, 2020

That's not possible currently, we don't have mechanisms to limit arguments that are allowed to be passed to api command (where host is being one of them), right now you can allow/deny access to command, there is no more granular parameters to tweak.
It's probably worth extending permissions to allow that, and i may try to add this, but that would probably take a bit of time to design/implement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants