portainer/api/http/handler
Chaim Lev-Ari adf33385ce
feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098)
* feat(containers): prevent non-admin users from running containers using the host namespace pid (#3970)

* feat(containers): Prevent non-admin users from running containers using the host namespace pid

* feat(containers): add rbac check for swarm stack too

* feat(containers): remove forgotten conflict

* feat(containers): init EnableHostNamespaceUse to true and return 403 on forbidden action

* feat(containers): change enableHostNamespaceUse to restrictHostNamespaceUse in html

* feat(settings): rename EnableHostNamespaceUse to AllowHostNamespaceForRegularUsers

* feat(database): trigger migration for AllowHostNamespace

* feat(containers): check container creation authorization

Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com>
2020-07-25 11:14:46 +12:00
..
auth refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
customtemplates fix(api): fix issues with old error declaration 2020-07-08 12:25:37 +12:00
dockerhub refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
edgegroups refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
edgejobs refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
edgestacks refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
edgetemplates feat(api): introduce new datastore interface (#3802) 2020-06-03 11:40:04 +12:00
endpointedge refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
endpointgroups refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
endpointproxy refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
endpoints refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
extensions refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
file fix(api): remove x-frame-options header (#2322) 2018-10-03 14:18:03 +13:00
motd feat(api): prevent non administrator users to use admin restricted API endpoints (#3227) 2019-10-07 16:10:51 +13:00
registries refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
resourcecontrols refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
roles feat(api): introduce new datastore interface (#3802) 2020-06-03 11:40:04 +12:00
settings feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00
stacks feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00
status fix(api): fix invalid restriction on StatusInspectVersion 2019-10-08 11:45:16 +13:00
support feat(app): add externally sourced support options (#3249) 2019-10-10 10:59:27 +13:00
tags refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
teammemberships refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
teams refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
templates feat(custom-templates): introduce custom templates (#3906) 2020-07-07 11:18:39 +12:00
upload refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
users refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
webhooks refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
websocket refactor(errors): reorganize errors (#3938) 2020-07-08 09:57:52 +12:00
handler.go feat(custom-templates): introduce custom templates (#3906) 2020-07-07 11:18:39 +12:00