Project

Profile

Help

Maintenance. Planio will be undergoing a scheduled maintenance this weekend. Between Saturday, July 24 at 9:00 UTC and Sunday, July 25, 22:00 UTC your account might observe occasional downtimes which may last up to several minutes in some cases.

Story #8951

Add authentication to content app

Added by gerrod about 1 month ago. Updated about 22 hours ago.

Status:
POST
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
GalaxyNG
Sprint:
Quarter:

Description

A user from AAH wants to be able to log who is downloading from the content app (https://issues.redhat.com/browse/AAH-643), so having authentication will be needed. Requests can be authenticated through middleware (https://docs.aiohttp.org/en/stable/web_advanced.html#middlewares) that will run the same auth methods used by the DRF views. The middleware could be configured by a new setting so users could turn it off. If a request fails authentication they will be marked as an AnonymousUser, but still allowed to download content. The RBAC content guard would use the authentication from this middleware to determine if the user has permission to download or not.


Related issues

Related to Pulp - Story #8940: Add RBAC content guard to pulpcorePOST

<a title="Actions" class="icon-only icon-actions js-contextmenu" href="#">Actions</a>

History

#1 Updated by gerrod about 1 month ago

  • Related to Story #8940: Add RBAC content guard to pulpcore added

#2 Updated by pulpbot 26 days ago

  • Status changed from NEW to POST

Please register to edit this issue

Also available in: Atom PDF