Details
-
Type:
New Feature
-
Status:
Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 1.4.0 (Beta)
-
Fix Version/s: 1.4.1
-
Component/s: Distributed Builds, Security, XMLRPC Interface
-
Labels:None
-
Complexity:Intermediate
-
Number of attachments :
Description
When CONTINUUM-2545 (Add WebDAV interface to continuum build agent for displaying the working copies) was implemented, there was no security implemented so anyone can access the working copies via webdav.
Issue Links
- is related to
-
CONTINUUM-2545
Add WebDAV interface to continuum build agent for displaying the working copies
-
-
CONTINUUM-2044
Build agent should only accept requests from its master
-
Related discussions in the dev list for this issue:
http://old.nabble.com/Added-WebDAV-interface-for-displaying-the-working-copies-from-build--agent-td29202005.html
http://old.nabble.com/Build-agent-security-td30547566.html
http://old.nabble.com/How-can-an-agent-be-sure-that-a-request-comes-from-its-master--td21546892.html