zot/pkg at main - zot

github/zot

mirror of https://github.com/project-zot/zot.git synced 2026-06-15 11:37:56 +08:00

Files

T

History

Vishwas Rajashekar c18a4a975d fix(authz): metrics: deny authenticated users not in ACL even with anonymous read (#4131 )

* fix(authz): metrics: reject users not in list even with anonymous read

Even when anonymous reads are enabled for metrics, users not in the
allowed list should not be allowed.

This change also refactors the MetricsAuthzHandler to align better
with this logic.

Signed-off-by: Vishwas Rajashekar <dev@vrajashkr.com>

* fix(authz): address review comments

Address comments to pass username when present
to AuthzFail if user is not allowed for metrics.
This changes the response to Forbidden instead of
Unauthorized.

Use isAnonymous() check instead of only checking for
empty username.

Signed-off-by: Vishwas Rajashekar <dev@vrajashkr.com>

* fix(authz): fix additional review comments

Fix a few more review comments

Signed-off-by: Vishwas Rajashekar <dev@vrajashkr.com>

---------

Signed-off-by: Vishwas Rajashekar <dev@vrajashkr.com>

2026-06-14 17:29:22 +03:00

api

fix(authz): metrics: deny authenticated users not in ACL even with anonymous read (#4131 )

2026-06-14 17:29:22 +03:00

buildinfo

refactor(build): move build metadata to pkg/buildinfo (#4045 )

2026-05-08 19:37:04 +03:00

cel

feat(authz): introduce conditional access control via CEL (#4040 )

2026-05-09 22:43:00 +03:00

cli

feat: config: validate metrics config (#4130 )