Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Discrepancy beetween what a user can pull and see in catalog with token_auth off #1651

Closed
ipanova opened this issue May 29, 2024 · 1 comment · Fixed by #1668
Closed

Discrepancy beetween what a user can pull and see in catalog with token_auth off #1651

ipanova opened this issue May 29, 2024 · 1 comment · Fixed by #1668
Assignees
Labels

Comments

@ipanova
Copy link
Member

ipanova commented May 29, 2024

Version
Please provide the versions of the pulpcore and pulp_container packages in use, and how they are installed. If you are using Pulp via Katello, please provide the Katello version.

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Disabled token_auth
Create a mix of public and privates repos. Notice that non-authed user can pull privately marked repo but does not see it in catalog.

Expected behavior
With token-auth disabled, non-authed user should see all repos in catalog (private and public) and pull also all of them

Additional context
#1649 (comment)

@ipanova ipanova changed the title Disrepancy beetween what a user can pull and see in catalog with token_auth off Discrepancy beetween what a user can pull and see in catalog with token_auth off May 29, 2024
@ipanova
Copy link
Member Author

ipanova commented May 30, 2024

We need to add a test when token auth is disabled, non-authed user should be able to see public and private repos in the catalog

@lubosmj lubosmj moved this from Not Started to Todo in Pulp Container Roadmap Jun 3, 2024
@git-hyagi git-hyagi self-assigned this Jun 18, 2024
@pulpbot pulpbot moved this to In Progress in RH Pulp Kanban board Jun 18, 2024
git-hyagi added a commit to git-hyagi/pulp_container that referenced this issue Jun 18, 2024
With token-auth disabled, allow non-authed users to see all
repos (public and private) in catalog.

closes: pulp#1651
@lubosmj lubosmj moved this from Todo to In Progress in Pulp Container Roadmap Jun 19, 2024
git-hyagi added a commit to git-hyagi/pulp_container that referenced this issue Jun 19, 2024
With token-auth disabled, allow non-authed users to see all
repos (public and private) in catalog.

closes: pulp#1651
@github-project-automation github-project-automation bot moved this from In Progress to Done in Pulp Container Roadmap Jun 20, 2024
@pulpbot pulpbot moved this from In Progress to Done in RH Pulp Kanban board Jun 20, 2024
@lubosmj lubosmj moved this from Done to Shipped in Pulp Container Roadmap Jul 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Shipped
Archived in project
Development

Successfully merging a pull request may close this issue.

3 participants