Uploaded image for project: 'Sentry'
  1. Sentry
  2. SENTRY-841

Revoke on SERVER scope breaks Client API, allows any string to be passed in

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.6.0
    • Fix Version/s: 1.6.0
    • Component/s: Service
    • Labels:
      None

      Description

      Revoke on server scope change the Java API in an incompatible way (added a new parameter). We need to fix the client API to have an overload for revoke which defaults to "ALL" privileges if nothing is specified.

      Additionally, it looks like any string can be passed in for the "action" field of the new API. We should validate that the action is valid - "SELECT", "INSERT", or "ALL".

        Attachments

        1. SENTRY-841.patch
          4 kB
          Ryan P
        2. SENTRY-841.patch
          4 kB
          Ryan P
        3. SENTRY-841.patch
          2 kB
          Ryan P

          Activity

            People

            • Assignee:
              Ryan P Ryan P
              Reporter:
              lskuff Lenni Kuff
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: