eclipse-theia / theia-cloud

Eclipse Public License 2.0
61 stars 34 forks source link

Check Workspace Owner when launching non-ephemeral Sessions #328

Closed jfaltermeier closed 3 months ago

jfaltermeier commented 3 months ago

The Service does filter out workspaces if the user does not match via https://github.com/eclipsesource/theia-cloud/blob/37785cfeb9a8b4cebd79e404750b74c2d8ec30a1/java/service/org.eclipse.theia.cloud.service/src/main/java/org/eclipse/theia/cloud/service/K8sUtil.java#L127

This change just makes sure that if there was a bug in the service, the operator does not just expose the workspace belonging to a different user.