Skip to content

Commit

Permalink
Expose all API keys to admins under REMOTE_USER
Browse files Browse the repository at this point in the history
This is the default setting for non-remote-user setups, this commit
adjusts the middleware to behave as expected.

Issue raised in http://dev.list.galaxyproject.org/User-API-keys-with-External-LDAP-authentication-disabled-td4668052.html
  • Loading branch information
hexylena committed Oct 8, 2015
1 parent 69cd5a9 commit 4705409
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions lib/galaxy/web/framework/middleware/remoteuser.py
Expand Up @@ -118,6 +118,8 @@ def __call__( self, environ, start_response ):
pass # Admin users need to be able to change user information
elif path_info.startswith( '/user/edit_info' ) and environ[ self.remote_user_header ] in self.admin_users:
pass # Admin users need to be able to change user information
elif path_info.startswith( '/userskeys/all_users' ) and environ[ self.remote_user_header ] in self.admin_users:
pass # Admin users need to be able to manage API keys for all users.
elif path_info.startswith( '/user/api_keys' ):
pass # api keys can be managed when remote_user is in use
elif path_info.startswith( '/user/edit_username' ):
Expand Down

0 comments on commit 4705409

Please sign in to comment.