self-hosted/teleport
self-hosted/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport synced 2024-10-22 02:03:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

update code review comments

Browse source
This commit is contained in:
Sasha Klizhentas 2016-07-29 09:55:13 -07:00
parent 6bb48bb850
commit a4dcebf127
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/auth/apiserver.go
View file

@ -470,7 +470,10 @@ func (s *APIServer) generateUserCert(w http.ResponseWriter, r *http.Request, _ h
// This allows us to make sure that users can only request new certificates
// only for themselves, except admin users
caller, _, ok := r.BasicAuth()
if !ok || (req.User != caller && s.a.role != teleport.RoleAdmin) {
if !ok {
return nil, trace.AccessDenied("Missing username or password")
}
if req.User != caller && s.a.role != teleport.RoleAdmin {
return nil, trace.AccessDenied("User %s cannot request a certificate for %s",
caller, req.User)
}