libertymutual / ssh-key-enforcer-stash

Layers additional controls over Bitbucket's SSH key features that enforce the stronger controls required in an enterprise environment.
Apache License 2.0
6 stars 7 forks source link

Generating a new USER key deletes all other key for that user. #12

Closed eddiewebb closed 8 years ago

eddiewebb commented 9 years ago

Right now it calls Stash service to purge all instead of getting list of user keys and purging specifically.

https://github.com/Libertymutual/ssh-key-enforcer-stash/blob/master/src/main/java/com/lmig/forge/stash/ssh/keys/EnterpriseSshKeyServiceImpl.java#L98

Generating a new user Key via our custom UI should only destroy existing user keys.

jdesulme commented 9 years ago

The changes look good especially since you're just removing my user key. Now I'm guessing this also means that by default I will be apart of that 90 day policy to change my key?

eddiewebb commented 9 years ago

Only the ones you create in stash. Ones you create in bamboo aren't enforced right now.