Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix for config store security issue #3097 #3109

Merged
merged 13 commits into from
Aug 26, 2023
Merged

Fix for config store security issue #3097 #3109

merged 13 commits into from
Aug 26, 2023

Conversation

schandrika
Copy link
Contributor

@schandrika schandrika commented Aug 22, 2023 •
edited
Loading

  1. Fixed issue Can bypass config store security by using rpc call rather than subsystem #3097
  2. As side effect deprecated the duplicate manage_* RPC methods
  3. Updated all core agents and test to not use the deprecated methods
  4. Updated documentation
  5. Updated config store test case for both new methods and deprecated methods
  6. Added config store tests for get_metadata method

@craig8 craig8 self-assigned this Aug 25, 2023
@craig8 craig8 linked an issue Aug 25, 2023 that may be closed by this pull request
Can bypass config store security by using rpc call rather than subsystem #3097
Open
@craig8 craig8 closed this Aug 25, 2023
@schandrika schandrika reopened this Aug 26, 2023
@craig8 craig8 merged commit ca6fe9f into VOLTTRON:develop Aug 26, 2023
@schandrika schandrika deleted the config_store_rpc branch April 2, 2024 20:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@davidraker davidraker davidraker approved these changes

@craig8 craig8 craig8 approved these changes

Assignees

@craig8 craig8

Labels
complete
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Can bypass config store security by using rpc call rather than subsystem
3 participants
@schandrika @craig8 @davidraker