Is your feature request related to a problem? Please describe. I'

FYI: This breaks chef-vault: <div class="snippet-clipboard-content notranslate pos

Non-admin client cannot fetch another user's public key about goiardi HOT 2 OPEN

limitusus commented on August 15, 2024

Non-admin client cannot fetch another user's public key

from goiardi.

Comments (2)

ctdk commented on August 15, 2024

Apologies for the delay responding (lots going on, for a long time, blah blah blah).

This one will be an easy fix, but before I go and do so I do need to check around a bit and make sure that's not the expected behavior. There's a possibility that either it was the expected behavior under the open source Chef 11 Server or that it simply wasn't addressed in the tests.

Thanks!

from goiardi.

tbe commented on August 15, 2024

FYI: This breaks chef-vault:

  * chef_vault_secret[test] action create[2020-11-26T17:05:37+00:00] ERROR: ERROR: You received a 403 FORBIDDEN while requesting an clients key for testnode2.

If you are on Chef Server < 12.5:
  Clients do not have access to all public keys within their org.
  Either upgrade to Chef Server >= 12.5 or make this request using a user.

If you are on Chef Server == 12.5.0
  All clients and users have access to the public keys endpoint. Getting
  this error on 12.5.0 is unexpected regardless of what your
  public_key_read_access_group contains.

If you are on Chef Server > 12.5.1
  Has your public_key_read_access_group been modified? This group controls
  read access on public keys within your org. It defaults to the users
  and client groups, so all org actors should have permission unless
  the defaults have been changed.

from goiardi.

Recommend Projects