Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v9] Fix RBAC rules for desktop session recordings #19711

Merged
merged 1 commit into from Dec 29, 2022

Conversation

zmb3
Copy link
Collaborator

@zmb3 zmb3 commented Dec 28, 2022

Desktop session playback is currently the only playback that leverages the StreamSessionEvents API (though that will change with RFD 91).

For this API, we were checking for VerbList instead of VerbRead. (The SSH session APIs were correctly checking VerbRead).

Since all uses of actionForKindSession now use the same verb, I've removed the verb as an argument to prevent this mistake from happening again.

Backports #19629

@@ -69,6 +69,7 @@ ssh.config

# build tooling
build.assets/tooling/bin/**
build.assets/.cache/
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was an intentional change that's on other branches but never made it to v9 and makes switching branches a pain.

Technically not related to this PR, but so minor I'd rather include it than have to wait for another set of v9 tests to pass to merge it in.

Desktop session playback is currently the only playback that leverages
the StreamSessionEvents API (though that will change with RFD 91).

For this API, we were checking for VerbList instead of VerbRead.
(The SSH session APIs were correctly checking VerbRead).

Since all uses of actionForKindSession now use the same verb, I've
removed the verb as an argument to prevent this mistake from happening
again.
@zmb3 zmb3 enabled auto-merge (squash) December 29, 2022 17:41
@zmb3 zmb3 merged commit f7679a8 into branch/v9 Dec 29, 2022
@zmb3 zmb3 deleted the zmb3/v9-backport-19629 branch May 7, 2024 22:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants