You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you are reporting a problem, please make sure the following information are provided:
Expected behavior and actual behavior:
Token generation seems to be ignoring access righs limitation in request. In example below I requested just pull permissions, but as request was made with admin user, I received also push and delete rights.
I expect to receive just permissions I requested.
Steps to reproduce the problem:
Please provide the steps to reproduce this problem.
Token request:
curl -k -X GET -H "Authorization: Basic mybasicstringhere" 'https://10.242.0.37:5443/service/token?service=harbor-registry&scope=repository:ocp-mirror/oc-mirror-metadata:pull'
{"token":"myloooooongtokenhere","access_token":"","expires_in":1800,"issued_at":"2024-04-05T07:41:16Z"}
When I decoded token with jwt-decode.payload , it shows delete, pull and push permissions.
I used default admin account created during Harbor installation
I requested just pull permission to one project scope=repository:ocp-mirror/oc-mirror-metadata:pull
If you are reporting a problem, please make sure the following information are provided:
Expected behavior and actual behavior:
Token generation seems to be ignoring access righs limitation in request. In example below I requested just pull permissions, but as request was made with admin user, I received also push and delete rights.
I expect to receive just permissions I requested.
Steps to reproduce the problem:
Please provide the steps to reproduce this problem.
Token request:
When I decoded token with
jwt-decode.payload
, it shows delete, pull and push permissions.Versions:
Please specify the versions of following systems.
Additional context:
harbor.yml
and files in the same directory, including subdirectory./var/log/harbor/
.The text was updated successfully, but these errors were encountered: