github
/
portainer
mirror of https://github.com/portainer/portainer
1
0
Fork 0
Code Issues Releases Wiki Activity
portainer/api/bolt
History
Chaim Lev-Ari adf33385ce
feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 
* feat(containers): prevent non-admin users from running containers using the host namespace pid (#3970)

* feat(containers): Prevent non-admin users from running containers using the host namespace pid

* feat(containers): add rbac check for swarm stack too

* feat(containers): remove forgotten conflict

* feat(containers): init EnableHostNamespaceUse to true and return 403 on forbidden action

* feat(containers): change enableHostNamespaceUse to restrictHostNamespaceUse in html

* feat(settings): rename EnableHostNamespaceUse to AllowHostNamespaceForRegularUsers

* feat(database): trigger migration for AllowHostNamespace

* feat(containers): check container creation authorization

Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com>
 		2020-07-25 11:14:46 +12:00
..
customtemplate feat(custom-templates): introduce custom templates (#3906) 2020-07-07 11:18:39 +12:00
dockerhub refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
edgegroup feat(edge-compute): add support for Edge stacks (#3827) 2020-05-14 14:14:28 +12:00
edgejob feat(edge-compute): move host jobs to edge (#3840) 2020-06-25 15:25:51 +12:00
edgestack feat(edge-compute): add support for Edge stacks (#3827) 2020-05-14 14:14:28 +12:00
endpoint feat(edge): introduce support for Edge agent (#3031) 2019-07-26 10:38:07 +12:00
endpointgroup refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
endpointrelation feat(edge-compute): add support for Edge stacks (#3827) 2020-05-14 14:14:28 +12:00
errors refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
extension refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
internal refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
migrator feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00
registry refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
resourcecontrol feat(api): rewrite access control management in Docker (#3337) 2019-11-13 12:41:42 +13:00
role feat(settings): add new settings to disable volume browser (#3239) 2019-10-08 13:17:58 +13:00
schedule refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
settings refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
stack refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
tag feat(edge-compute): add support for Edge stacks (#3827) 2020-05-14 14:14:28 +12:00
team refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
teammembership refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
tunnelserver feat(edge): introduce support for Edge agent (#3031) 2019-07-26 10:38:07 +12:00
user refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
version refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
webhook refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
datastore.go refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
init.go feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00