search

operasoftware / ssh-key-authority

A tool for managing SSH key access to any number of servers.
Apache License 2.0
456 stars 71 forks source link

Add functionality for normal users to view the full data of /servers.json #71

Closed MegaManSec closed 4 months ago

MegaManSec commented 1 year ago

This patch provides the functionality of allowing certain accounts to view the full output of /servers.json, including server administrators.

Previously, the only users which could view this data in full were sysadmins, which does not comply with the least privilege principle of security (they are able to make changes to keys, while only needing to view read-only data).