Jeff Mitchell
22462cdd84
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed. * Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing. * Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
17 lines
299 B
Bash
17 lines
299 B
Bash
load _authorized_actions
|
|
|
|
function list_sessions() {
|
|
boundary sessions list -scope-id $1 -format json
|
|
}
|
|
|
|
function count_sessions() {
|
|
list_sessions $1 | jq '. | length'
|
|
}
|
|
|
|
function cancel_session() {
|
|
boundary sessions cancel -id $1
|
|
}
|
|
|
|
function read_session() {
|
|
boundary sessions read -id $1
|
|
} |