Actions
action #6096
closedRestrict workers to have full API access by random, individual tokens (was: change worker authentication)
Status:
Rejected
Priority:
Low
Assignee:
Category:
Feature requests
Target version:
Start date:
2015-01-28
Due date:
% Done:
0%
Estimated time:
Description
workers currently use user tokens and therefore have access to the full API. Workers should have differnt privileges that only allows them to grab jobs, set jobs to finish etc. That makes sure test code run by a worker cannot accidentally nor intentionally mess with the API.
Updated by lnussel about 10 years ago
- Related to action #6602: move worker credentials to workers.ini added
Updated by okurz over 5 years ago
- Subject changed from change worker authentication to Restrict workers to have full API access by random, individual tokens (was: change worker authentication)
Updated by okurz over 5 years ago
- Related to coordination #6558: [epic] add/edit/remove users added
Actions