Opened 4 years ago
Closed 4 years ago
#2351 closed enhancement (fixed)
Petascope - write requests from WSClient with petascope admin credentials should bypass allow_write_requests_from configuration
Reported by: | Bang Pham Huu | Owned by: | Bang Pham Huu |
---|---|---|---|
Priority: | major | Milestone: | 10.0 |
Component: | petascope | Version: | 9.8 |
Keywords: | Cc: | Dimitar Misev, Vlad Merticariu | |
Complexity: | Medium |
Description
allow_write_requests_from
in petsascope.properties contains the IP addresses which are allowed to send write requests to petascope (e.g: InsertCoverage, UpdeteCoverage,…).
In WSClient, after petascope admin users logged in, he can see the tabs for write requests as well and send these requests to petascope.
However, because his IP address is external from the local IP address set in petascope.properties, then these requests will be blocked and WSClient is useless for management.
Petascope should check the credentails in basic headers from WSClient in this case, if they are correct to petascope admin user then, it should bypass the IP check.