New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Verify that no access to ESCAPE storage area is granted to clients presenting a IAM escape token without group or storage.* scopes #5

Open

Tracked by

andreaceccanti opened this issue Sep 27, 2021 · 1 comment

Contributor

andreaceccanti commented Sep 27, 2021

No description provided.

andreaceccanti mentioned this issue

Define authorization tests for the ESCAPE Datalake #2

Open

7 tasks

Contributor

federicaagostini commented Sep 30, 2021

Implemented test for verifying that the reading permissions are denied to IAM ESCAPE tokens with openid scope.

Implemented also a couple of group base authz tests:

read only access is granted to default groups
full access (read, make directory, remove) is granted to the /escape/data-manager group

The testsuite uses gfal as utils for auth tests; don't know if it is better to use curl.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment