[HDDS-6600] [MultiTenancy] No user validation on assignUser API

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Component/s: Ozone Manager
• Labels: ozone-multitenancy
• Assignee: Siyao Meng
• Reporter: Soumitra Sulav
• Created: 18/Apr/22 17:21
• Updated: 29/May/22 17:35
• Resolved: 24/May/22 18:15

Description

No validation of user while running assignUser API under tenant.

Non-existent User

bash-4.2$ ozone tenant user assign user -t tenantone
Assigned 'user' to 'tenantone' with accessId 'tenantone$user'.
export AWS_ACCESS_KEY_ID='tenantone$user'
export AWS_SECRET_ACCESS_KEY='b58a64f66e6091cd22cdd1666e226c82e8138ba7a86804a3086d108ef6036961'

Invalid user (tried regex)

bash-4.2$ ozone tenant user assign "*" -t tenantone
Assigned '*' to 'tenantone' with accessId 'tenantone$*'.
export AWS_ACCESS_KEY_ID='tenantone$*'
export AWS_SECRET_ACCESS_KEY='27f9420833b1433774660654a8cc054e76d630e0d5d2ee3d0e3a1c327ecc5ac8'
bash-4.2$ ozone tenant user assign "user*" -t tenantone
Assigned 'user*' to 'tenantone' with accessId 'tenantone$user*'.
export AWS_ACCESS_KEY_ID='tenantone$user*'
export AWS_SECRET_ACCESS_KEY='99c4652cc90a4f5b46396432b00c3422f0ba481528cdc968b91ee6cedaa2f649'

User of length greater than 100

bash-4.2$ ozone tenant user assign --tenant=tenantone 'testuser-f27b137a62cd8b021239527c725d6a9d56e0cdce8ca7db6a4b923c941452df00sfdadfdadfsddfaddsajjdakfisfiaidhikakdkjdkasjkdas'
Assigned 'testuser-f27b137a62cd8b021239527c725d6a9d56e0cdce8ca7db6a4b923c941452df00sfdadfdadfsddfaddsajjdakfisfiaidhikakdkjdkasjkdas' to 'tenantone' with accessId 'tenantone$testuser-f27b137a62cd8b021239527c725d6a9d56e0cdce8ca7db6a4b923c941452df00sfdadfdadfsddfaddsajjdakfisfiaidhikakdkjdkasjkdas'.
export AWS_ACCESS_KEY_ID='tenantone$testuser-f27b137a62cd8b021239527c725d6a9d56e0cdce8ca7db6a4b923c941452df00sfdadfdadfsddfaddsajjdakfisfiaidhikakdkjdkasjkdas'
export AWS_SECRET_ACCESS_KEY='b9e5ad69c39561446b571419dba3e39b0b90936040c63b2a70ba5b94a7fb9f85'