Skip to content

[v14] ensure moderated file transfers only perform allowed operations#39352

Merged
capnspacehook merged 3 commits intobranch/v14from
capnspacehook/backport/v14/39091
Mar 14, 2024
Merged

[v14] ensure moderated file transfers only perform allowed operations#39352
capnspacehook merged 3 commits intobranch/v14from
capnspacehook/backport/v14/39091

Conversation

@capnspacehook
Copy link
Copy Markdown
Contributor

Backport of #39091 and #39343.

changelog: only allow necessary operations during moderated file transfers and limit in-flight file transfer requests to one per session

@capnspacehook capnspacehook added backport server-access sftp Issues related to Teleport's SFTP implementation labels Mar 14, 2024
@github-actions github-actions Bot requested review from Tener, avatus and zmb3 March 14, 2024 15:54
@capnspacehook capnspacehook enabled auto-merge March 14, 2024 15:55
capnspacehook and others added 2 commits March 14, 2024 10:07
* ensure moderated file transfers only preform allowed operations

* fix sess test

* wip integration test

* integration test working

* tweak some error messages and test cases

* allow setstat for uploads

* address nits from code review

* expand paths when necessary when creating file transfer request

* improve UX of errors in web UI

* deny request when an invalid user tries to transfer files

* don't allow open requests, they aren't done by the webui

* address feedback

* use a buffered reader when reading the file request, address a few nits
@capnspacehook capnspacehook force-pushed the capnspacehook/backport/v14/39091 branch from 7951779 to f35bd5f Compare March 14, 2024 16:08
@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from avatus March 14, 2024 16:22
@capnspacehook capnspacehook added this pull request to the merge queue Mar 14, 2024
Merged via the queue into branch/v14 with commit 47acace Mar 14, 2024
@capnspacehook capnspacehook deleted the capnspacehook/backport/v14/39091 branch March 14, 2024 23:58
This was referenced Aug 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport server-access sftp Issues related to Teleport's SFTP implementation size/md

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants