Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can bypass config store security by using rpc call rather than subsystem #3097

Open
craig8 opened this issue Aug 4, 2023 · 0 comments · Fixed by #3109
Open

Can bypass config store security by using rpc call rather than subsystem #3097

craig8 opened this issue Aug 4, 2023 · 0 comments · Fixed by #3109
Assignees
@schandrika
Labels
bug security

Comments

@craig8
Copy link
Contributor

craig8 commented Aug 4, 2023

Describe the bug
When an agent makes an rpc call to config store identity the same authentication is not being respected as when the caller goes through self.config
@schandrika schandrika mentioned this issue Aug 22, 2023
Merged
@craig8 craig8 linked a pull request Aug 25, 2023 that will close this issue
Fix for config store security issue #3097 #3109
Merged
craig8 added a commit that referenced this issue Aug 26, 2023
@craig8
Merge pull request #3109 from schandrika/config_store_rpc
ca6fe9f 
Fix for config store security issue #3097
schandrika added a commit to schandrika/volttron-core that referenced this issue Oct 23, 2023
@schandrika
ported config store security updates from monolithic volttron. See is…
7a307b4 
…sue - VOLTTRON/volttron#3097
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@schandrika schandrika

Labels
bug security
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix for config store security issue #3097 schandrika/volttron
2 participants
@craig8 @schandrika