Mike Jensen c9f5d175b5 ipn/localapi: require local admin for dev-set-state-store (#21222) ...

State keys written by dev-set-state-store are otherwise gated by their own handlers, for example serve-config requires a local admin before storing a _serve/<profile-id> key.

Writing such a key directly through dev-set-state-store skipped that check. Require`IsLocalAdmin` in the handler, the same check serve-config performs.

Credit to @johnnymiranda for reporting this issue.

Fixes tailscale/corp#47886

Change-Id: Ie82f961b016f78895793d801929a4fa11ebf7fd8

Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-09-11 14:07:53 -06:00

..

auditlog

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

conffile

ipn/ipnlocal,cmd/tailscale/cli: support unix socket targets for TCP serve

2026-07-16 09:13:38 -06:00

desktop

ipn/{desktop,ipnlocal}: register per-user policy stores on session lifecycle (#20293)

2026-08-17 19:59:42 -07:00

ipnauth

ipnauth: set isUnixSock in the ts_omit_unixsocketidentity GetConnIdentity

2026-07-31 17:30:11 -07:00

ipnext

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

ipnlocal

ipn/ipnlocal: add exceptions to 4via6 filter

2026-09-11 15:41:26 -04:00

ipnserver

envknob: add SetenvForTest helper for safe environment variable handling

2026-08-19 12:22:26 +01:00

ipnstate

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

lapitest

ipn/ipnlocal: consolidate test-only LocalBackend methods behind ForTest

2026-06-27 16:11:42 -07:00

localapi

ipn/localapi: require local admin for dev-set-state-store (#21222)

2026-09-11 14:07:53 -06:00

policy

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store

envknob: add SetenvForTest helper for safe environment variable handling

2026-08-19 12:22:26 +01:00

backend_test.go

ipn: add fmt.Stringer support to NotifyWatchOpt (#20072)

2026-06-18 10:27:16 -07:00

backend.go

client/local, ipn, tailcfg: document which LocalAPI client APIs are stable

2026-07-20 10:41:59 -07:00

conf_test.go

ipn/conf: support RemoteConfig in the config file

2026-07-14 10:29:19 +02:00

conf.go

ipn/conf: support RemoteConfig in the config file

2026-07-14 10:29:19 +02:00

doc.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_clone.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

ipn_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_view.go

wgengine/router/osrouter: add native FreeBSD routing, no-snat support

2026-08-31 20:31:01 -07:00

prefs_test.go

cmd/tailscale, ipn, feature/remoteconfig: add remote-config support

2026-07-07 12:10:34 -07:00

prefs.go

wgengine/router/osrouter: add native FreeBSD routing, no-snat support

2026-08-31 20:31:01 -07:00

serve_expand_test.go

ipn/ipnlocal,cmd/tailscale/cli: support unix socket targets for TCP serve

2026-07-16 09:13:38 -06:00

serve_test.go

cmd/tailscale: allow IPv6 localhost serve targets

2026-08-31 14:25:58 -07:00

serve.go

cmd/tailscale: allow IPv6 localhost serve targets

2026-08-31 14:25:58 -07:00

store_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store.go

ipn/store: make WriteState(id, nil) delete key instead of adding nil entry (#19920)

2026-05-29 11:22:14 -07:00