update comment

cryostatio · Dec 5, 2022 · 8b36441 · 8b36441
1 parent 78fdd3c
commit 8b36441
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/main/java/io/cryostat/net/openshift/OpenShiftAuthManager.java b/src/main/java/io/cryostat/net/openshift/OpenShiftAuthManager.java
@@ -276,8 +276,10 @@ public Future<Boolean> validateToken(
 
         String ns;
         if (SecurityContext.DEFAULT.equals(securityContext)) {
-            // FIXME should this be the deployment namespace or just no namespace? Should those be
-            // two separate contexts?
+            // TODO does this make sense? Operations that use the DEFAULT security context are
+            // considered to be operations within the namespace that Cryostat is deployed within.
+            // This means that the requesting client must have some permissions to access Cryostat
+            // itself.
             ns = namespace.get();
         } else {
             ns = ((OpenShiftSecurityContext) securityContext).getNamespace();