Actions
Bug #1698
closedSecure replication method
Start date:
09/23/2004
Due date:
% Done:
0%
Estimated time:
Bugzilla-Id:
1698
Description
Curently, unsecured metacat replication action is easy to break the replication
setup. But it couldn't create a new replication without adding certification to
metacat java lib.
Actions in MetacatReplication class, such as "start", "stop" and "servercontrol"
et al, need be secured. We may use the approach in "buildindex" action in
MetaCatServelet class, it only allow administrator can operate this action.
Updated by Jing Tao over 19 years ago
Add code to get user name and group in MetacatReplication class. Then check if
the user name is a admin when action is one of start, stop, getAll and
servercontrol. So now only admin user can change those parameters.
Updated by Matt Jones about 19 years ago
Changing milestone to reflect its actual release in 1.6
Actions