open-balena-api icon indicating copy to clipboard operation
open-balena-api copied to clipboard

Published 20 hours ago • verified publisher icon balena-io

Make the device permissions explicit

Open richbayliss opened this issue 5 years ago • 0 comments

The permission resin.device.all is allowing all ports to be available to tunnel unintentionally. This should be broken down to create, read, update and delete.

Additionally we would like to keep the ability to tunnel any port, so we will add a new permission resin.device.tunnel-any which can be checked for.

Please see https://github.com/balena-io/open-balena/issues/47 for the original issue.

richbayliss avatar Apr 17 '19 11:04 richbayliss