portainer/api/http/handler/settings
Chaim Lev-Ari adf33385ce
feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098)
* feat(containers): prevent non-admin users from running containers using the host namespace pid (#3970)

* feat(containers): Prevent non-admin users from running containers using the host namespace pid

* feat(containers): add rbac check for swarm stack too

* feat(containers): remove forgotten conflict

* feat(containers): init EnableHostNamespaceUse to true and return 403 on forbidden action

* feat(containers): change enableHostNamespaceUse to restrictHostNamespaceUse in html

* feat(settings): rename EnableHostNamespaceUse to AllowHostNamespaceForRegularUsers

* feat(database): trigger migration for AllowHostNamespace

* feat(containers): check container creation authorization

Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com>
2020-07-25 11:14:46 +12:00
..
handler.go feat(kubernetes): introduce kubernetes support (#3987) 2020-07-06 11:21:03 +12:00
settings_inspect.go feat(api): introduce new datastore interface (#3802) 2020-06-03 11:40:04 +12:00
settings_ldap_check.go refactor(api): refactor base import path (#2788) 2019-03-21 14:20:14 +13:00
settings_public.go feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00
settings_update.go feat(containers): Prevent non-admin users from running containers using the host namespace pid (#4098) 2020-07-25 11:14:46 +12:00