Access control not enforced on terminate action.

NORDUnet / opennsa

Open-source implementation of the NSI protocol with support for different backends

BSD 3-Clause "New" or "Revised" License

13 stars 19 forks source link

Access control not enforced on terminate action. #40

Open jmacauley opened 2 years ago

jmacauley commented 2 years ago

This one is pretty simple. The query operation filters reservations based on the requester's nsaId so an NSA only sees reservation created by itself, however, OpenNSA does not restrict the terminate operation on NSA to terminate a second NSA's reservation.