Skip to content
This repository has been archived by the owner on Nov 12, 2019. It is now read-only.

killing an instance should require a ...:manage-worker-type:<workerType> scope #40

Open
jhford opened this issue Nov 7, 2017 · 0 comments

Comments

@jhford
Copy link
Contributor

jhford commented Nov 7, 2017

We should look up the worker type in the database and submit it to req.satisfies to see if the resource that's trying to be killed matches the scope that's in the credentials.

This would allow anyone with the manage scope for that worker type to kill any instance of that worker type.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant