GO-2025-4237: Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate

adminlist

package

v1.28.2 Latest Latest Go to latest Published: Dec 19, 2024 License: BSD-3-Clause Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/weaviate/weaviate

Links

Documentation ¶

Index ¶

Constants
type Authorizer
- func New(cfg Config) *Authorizer
- func (a *Authorizer) Authorize(principal *models.Principal, verb string, resources ...string) error
type Config
- func (c Config) Validate() error

Constants ¶

View Source

const AnonymousPrincipalUsername = "anonymous"

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Authorizer ¶

type Authorizer struct {
	// contains filtered or unexported fields
}

Authorizer provides either full (admin) or no access

func New ¶

func New(cfg Config) *Authorizer

New Authorizer using the AdminList method

func (*Authorizer) Authorize ¶

func (a *Authorizer) Authorize(principal *models.Principal, verb string, resources ...string) error

Authorize will give full access (to any resource!) if the user is part of the admin list or no access at all if they are not

type Config ¶

type Config struct {
	Enabled        bool     `json:"enabled" yaml:"enabled"`
	Users          []string `json:"users" yaml:"users"`
	ReadOnlyUsers  []string `json:"read_only_users" yaml:"read_only_users"`
	Groups         []string `json:"groups" yaml:"groups"`
	ReadOnlyGroups []string `json:"read_only_groups" yaml:"read_only_groups"`
}

Config makes every subject on the list an admin, whereas everyone else has no rights whatsoever

func (Config) Validate ¶

func (c Config) Validate() error

Validate admin list config for viability, can be called from the central config package

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL