Jeff Mitchell
22462cdd84
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed. * Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing. * Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
25 lines
784 B
Bash
25 lines
784 B
Bash
export BOUNDARY_ADDR="${BOUNDARY_ADDR:-http://127.0.0.1:9200}"
|
|
export DEFAULT_PASSWORD="${DEFAULT_PASSWORD:-password}"
|
|
export DEFAULT_LOGIN="${DEFAULT_LOGIN:-admin}"
|
|
export DEFAULT_UNPRIVILEGED_LOGIN="${DEFAULT_UNPRIVILEGED_LOGIN:-user}"
|
|
export DEFAULT_AMPW="${DEFAULT_AMPW:-ampw_1234567890}"
|
|
export DEFAULT_P_ID='p_1234567890'
|
|
export DEFAULT_O_ID='o_1234567890'
|
|
export DEFAULT_GLOBAL='global'
|
|
export DEFAULT_TARGET='ttcp_1234567890'
|
|
export DEFAULT_HOST_SET='hsst_1234567890'
|
|
export DEFAULT_HOST_CATALOG='hcst_1234567890'
|
|
export DEFAULT_HOST='hst_1234567890'
|
|
export DEFAULT_USER='u_1234567890'
|
|
export DEFAULT_UNPRIVILEGED_USER='u_0987654321'
|
|
export DEFAULT_GLOBAL='global'
|
|
|
|
function strip() {
|
|
echo "$1" | tr -d '"'
|
|
}
|
|
|
|
function strip_all() {
|
|
echo "$1" | tr -d '"' | tr -d '\'\'
|
|
}
|
|
|