Uploaded image for project: 'COmanage'
  1. COmanage
  2. CO-1826

SSH Authenticator key upload fails for non-privileged CoPerson

    XMLWordPrintable

Details

    Description

      The add.ctp view for SshKeys creates a form with action

      /registry/ssh_key_authenticator/ssh_keys/add/authenticatorid:1/copersonid:8068

      but the view also includes the file fields.inc and that file also creates a form with action

      /registry/ssh_key_authenticator/ssh_keys/addKeyFile

      That action is missing the authenticator and coperson named parameters.

      Firefox 70.0.1 uses the second action without the named parameters when the UPLOAD button is clicked and so the named parameters are not passed into the controller. As a result the calculated permissions are not correct and the POST is rejected, particularly when the user has no special permissions (is not a CO admin or COU admin).

      This behavior is seen in the current develop branch, which is at

      c082d8f99276ea3c021c428816097a14ef3f7205

      Attachments

        Activity

          People

            scott.koranda.3@at.internet2.edu Scott Koranda SCG (Inactive)
            scott.koranda.3@at.internet2.edu Scott Koranda SCG (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: