Jarek Kowalski 4efb06849e server: ensure we reject access to the UI static files for users other than the UI user (#884) ...

This is for a scenario where a user provides valid username/password
but such that the username is not authorized to access the UI.

Previously we'd make it look like they got access (because they can
see the UI at leaast partially), but all API calls would fail.

With this change we're failing early with HTTP 403 and pointing the
users at a GH issue explaining what to do.

Fixes #580.

2021-03-13 09:58:27 -08:00

..

api_content.go

server: refactored authentication and authorization (#871)

2021-03-08 22:25:22 -08:00

api_error.go

server: reworked authn/authz (#788)

2021-01-21 07:31:34 -08:00

api_estimate.go

New snapshot UX - streamlined snapshot creation and policy setting (#878)

2021-03-10 23:04:55 -08:00

api_manifest.go

server: refactored authentication and authorization (#871)

2021-03-08 22:25:22 -08:00

api_mount.go

Fuse: Passthrough options to allow other-users access and mounting in empty directory. (#691)

2020-10-31 21:57:27 -07:00

api_object_get.go

server: refactored authentication and authorization (#871)

2021-03-08 22:25:22 -08:00

api_policies.go

repo: refactored repository interfaces (#780)

2021-01-20 11:41:47 -08:00

api_repo.go

Improvements and cleanups for connecting to kopia server (#870)

2021-03-07 11:25:21 -08:00

api_restore.go

Restore UI (#823)

2021-02-11 02:08:47 -08:00

api_snapshots.go

server: pre-read request body to fix HTTP/2 deadlock (#539)

2020-08-15 21:53:46 -07:00

api_sources.go

New snapshot UX - streamlined snapshot creation and policy setting (#878)

2021-03-10 23:04:55 -08:00

api_tasks.go

Added support for Tasks in the UI (#818)

2021-02-08 17:54:39 -08:00

api_user.go

Kopia UI improvements for repository management (#592)

2020-09-07 08:00:19 -07:00

grpc_session.go

Improvements and cleanups for connecting to kopia server (#870)

2021-03-07 11:25:21 -08:00

htmlui_embed.go

Replace go-bindata with //go:embed (#844)

2021-02-23 01:09:40 -08:00

htmlui_fallback.go

Replace go-bindata with //go:embed (#844)

2021-02-23 01:09:40 -08:00

index.html

Replace go-bindata with //go:embed (#844)

2021-02-23 01:09:40 -08:00

server_authz_checks.go

server: refactored authentication and authorization (#871)

2021-03-08 22:25:22 -08:00

server_test.go

server: refactored authentication and authorization (#871)

2021-03-08 22:25:22 -08:00

server.go

server: ensure we reject access to the UI static files for users other than the UI user (#884)

2021-03-13 09:58:27 -08:00

source_manager.go

New snapshot UX - streamlined snapshot creation and policy setting (#878)

2021-03-10 23:04:55 -08:00