Project

Profile

Help

Issue #8870

closed

Unpublished content can be accessed if relative path of content is know

Added by dalley almost 3 years ago. Updated over 2 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 102
Quarter:

Description

It is expected for the package to be available at http://pulp3-source-centos7/pulp/content/fixture/Packages/b/bear-4.1-1.noarch.rpm

It is not expected for the package to be available at http://pulp3-source-centos7/pulp/content/fixture/bear-4.1-1.noarch.rpm (the root of the repo)

Neither primary.xml nor the directory listing show the files in the repo root, although they are that way in the original repo.

To reproduce:

pulp rpm remote create --name=fixture --url=https://fixtures.pulpproject.org/rpm-unsigned/ --policy=on_demand
pulp rpm repository create --name=fixture --remote=fixture
pulp rpm repository sync --name fixture
pulp rpm publication create --repository fixture
pulp rpm distribution create --name fixture --repository fixture --base-path=fixture

Files


Related issues

Related to RPM Support - Issue #9071: Getting 500 error while accessing pulp/content/reponame/config.repoCLOSED - CURRENTRELEASEgerrodActions
Copied to Pulp - Issue #9126: Backport 8870 "Unpublished content can be accessed if relative path of content is known" to 3.14.zCLOSED - CURRENTRELEASEActions
Copied to RPM Support - Issue #9223: Unpublished content can be accessed if relative path of content is knowCLOSED - CURRENTRELEASEipanova@redhat.comActions
Actions #1

Updated by dalley almost 3 years ago

None of the repodata files are available from the root.

Actions #2

Updated by dkliban@redhat.com almost 3 years ago

  • Project changed from Pulp to RPM Support
Actions #3

Updated by dalley almost 3 years ago

  • Priority changed from Normal to Low
  • Triaged changed from No to Yes
Actions #4

Updated by dalley almost 3 years ago

  • Project changed from RPM Support to Pulp
Actions #5

Updated by gerrod almost 3 years ago

  • Subject changed from Packages which weren't published at the repository root are available at the repository root to Unpublished content can be accessed if relative path of content is know
  • Assignee set to gerrod
  • Priority changed from Low to Normal

This problem affects all publication based plugins. Steps to reproduce

  1. Create repo: pulp file repository create --name test
  2. Create remote: pulp file remote create --name test --url https://fixtures.pulpproject/file/PULP_MANIFEST
  3. Sync repo: pulp file repository sync --name test --remote test
  4. Create distribution: pulp file distribution create --name test --base-path test --repository test
  5. Access unpublished content: http :24816/pulp/content/test/1.iso
  6. Get 404 for published metadata: http :24816/pulp/content/test/PULP_MANIFEST
Actions #6

Updated by dalley almost 3 years ago

  • Status changed from NEW to ASSIGNED
  • Sprint set to Sprint 100
Actions #7

Updated by dalley almost 3 years ago

  • Related to Issue #9071: Getting 500 error while accessing pulp/content/reponame/config.repo added
Actions #8

Updated by pulpbot almost 3 years ago

  • Status changed from ASSIGNED to POST
Actions #9

Updated by rchan almost 3 years ago

  • Sprint changed from Sprint 100 to Sprint 101
Actions #10

Updated by dalley over 2 years ago

  • Sprint/Milestone set to 3.15.0
Actions #11

Updated by dalley over 2 years ago

  • Copied to Issue #9126: Backport 8870 "Unpublished content can be accessed if relative path of content is known" to 3.14.z added
Actions #12

Updated by ipanova@redhat.com over 2 years ago

  • Sprint changed from Sprint 101 to Sprint 102

Added by gerrod over 2 years ago

Revision 27a0dc74 | View on GitHub

Prevent access to unpublished content from content app

fixes: #8870 https://pulp.plan.io/issues/8870 Required PR: https://github.com/pulp/pulp_file/pull/547

Actions #13

Updated by gerrod over 2 years ago

  • Status changed from POST to MODIFIED
Actions #14

Updated by ipanova@redhat.com over 2 years ago

  • Copied to Issue #9223: Unpublished content can be accessed if relative path of content is know added
Actions #15

Updated by pulpbot over 2 years ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Also available in: Atom PDF