From 154d0a9b8947ce12e18fedf1a3b3e444e712777e Mon Sep 17 00:00:00 2001
From: Marc Capell <marc.capell@docker.com>
Date: Wed, 14 Jun 2023 17:08:07 +0200
Subject: [PATCH] Explicitly set the actions required in the authentication

Instead of using the action `*`, explicitly request the actions that
will be needed.
---
 server/server.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server/server.go b/server/server.go
index c57e452d1..9ffadfa3d 100644
--- a/server/server.go
+++ b/server/server.go
@@ -197,7 +197,7 @@ func RootHandler(ctx context.Context, ac auth.AccessController, trust signed.Cry
 		notFoundError,
 		false,
 		nil,
-		[]string{"*"},
+		[]string{"pull", "push", "delete"},
 		authWrapper,
 		repoPrefixes,
 	))
@@ -207,7 +207,7 @@ func RootHandler(ctx context.Context, ac auth.AccessController, trust signed.Cry
 		notFoundError,
 		false,
 		nil,
-		[]string{"*"},
+		[]string{"pull", "push", "delete"},
 		authWrapper,
 		repoPrefixes,
 	))
@@ -227,7 +227,7 @@ func RootHandler(ctx context.Context, ac auth.AccessController, trust signed.Cry
 		notFoundError,
 		false,
 		nil,
-		[]string{"*"},
+		[]string{"pull", "push", "delete"},
 		authWrapper,
 		repoPrefixes,
 	))