Actions
Issue #8870
closedUnpublished content can be accessed if relative path of content is know
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 102
Quarter:
Description
It is expected for the package to be available at http://pulp3-source-centos7/pulp/content/fixture/Packages/b/bear-4.1-1.noarch.rpm
It is not expected for the package to be available at http://pulp3-source-centos7/pulp/content/fixture/bear-4.1-1.noarch.rpm (the root of the repo)
Neither primary.xml nor the directory listing show the files in the repo root, although they are that way in the original repo.
To reproduce:
pulp rpm remote create --name=fixture --url=https://fixtures.pulpproject.org/rpm-unsigned/ --policy=on_demand
pulp rpm repository create --name=fixture --remote=fixture
pulp rpm repository sync --name fixture
pulp rpm publication create --repository fixture
pulp rpm distribution create --name fixture --repository fixture --base-path=fixture
Files
Related issues
Updated by dalley over 3 years ago
None of the repodata files are available from the root.
Updated by dkliban@redhat.com over 3 years ago
- Project changed from Pulp to RPM Support
Updated by dalley over 3 years ago
- Priority changed from Normal to Low
- Triaged changed from No to Yes
Updated by gerrod over 3 years ago
- Subject changed from Packages which weren't published at the repository root are available at the repository root to Unpublished content can be accessed if relative path of content is know
- Assignee set to gerrod
- Priority changed from Low to Normal
This problem affects all publication based plugins. Steps to reproduce
- Create repo:
pulp file repository create --name test
- Create remote:
pulp file remote create --name test --url https://fixtures.pulpproject/file/PULP_MANIFEST
- Sync repo:
pulp file repository sync --name test --remote test
- Create distribution:
pulp file distribution create --name test --base-path test --repository test
- Access unpublished content:
http :24816/pulp/content/test/1.iso
- Get 404 for published metadata:
http :24816/pulp/content/test/PULP_MANIFEST
Updated by dalley over 3 years ago
- Status changed from NEW to ASSIGNED
- Sprint set to Sprint 100
Updated by dalley over 3 years ago
- Related to Issue #9071: Getting 500 error while accessing pulp/content/reponame/config.repo added
Updated by pulpbot over 3 years ago
- Status changed from ASSIGNED to POST
Updated by dalley over 3 years ago
- Copied to Issue #9126: Backport 8870 "Unpublished content can be accessed if relative path of content is known" to 3.14.z added
Updated by ipanova@redhat.com over 3 years ago
- Sprint changed from Sprint 101 to Sprint 102
Added by gerrod over 3 years ago
Updated by gerrod over 3 years ago
- Status changed from POST to MODIFIED
Applied in changeset pulpcore|27a0dc7424769b2d5d7e98ebc4cf9cdba6cdc149.
Updated by ipanova@redhat.com over 3 years ago
- Copied to Issue #9223: Unpublished content can be accessed if relative path of content is know added
Updated by pulpbot over 3 years ago
- Status changed from MODIFIED to CLOSED - CURRENTRELEASE
Actions
Prevent access to unpublished content from content app
fixes: #8870 https://pulp.plan.io/issues/8870 Required PR: https://github.com/pulp/pulp_file/pull/547