mirror of https://github.com/portainer/portainer
* feat(containers): prevent non-admin users from running containers using the host namespace pid (#3970) * feat(containers): Prevent non-admin users from running containers using the host namespace pid * feat(containers): add rbac check for swarm stack too * feat(containers): remove forgotten conflict * feat(containers): init EnableHostNamespaceUse to true and return 403 on forbidden action * feat(containers): change enableHostNamespaceUse to restrictHostNamespaceUse in html * feat(settings): rename EnableHostNamespaceUse to AllowHostNamespaceForRegularUsers * feat(database): trigger migration for AllowHostNamespace * feat(containers): check container creation authorization Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com> |
||
|---|---|---|
| .. | ||
| archive | ||
| bolt | ||
| chisel | ||
| cli | ||
| cmd/portainer | ||
| crypto | ||
| docker | ||
| exec | ||
| filesystem | ||
| git | ||
| http | ||
| internal | ||
| jwt | ||
| kubernetes | ||
| ldap | ||
| libcompose | ||
| go.mod | ||
| go.sum | ||
| kubernetes.go | ||
| portainer.go | ||
| swagger.yaml | ||
| swagger_config.json | ||