Mike Jensen c9f5d175b5 ipn/localapi: require local admin for dev-set-state-store (#21222) ...

State keys written by dev-set-state-store are otherwise gated by their own handlers, for example serve-config requires a local admin before storing a _serve/<profile-id> key.

Writing such a key directly through dev-set-state-store skipped that check. Require`IsLocalAdmin` in the handler, the same check serve-config performs.

Credit to @johnnymiranda for reporting this issue.

Fixes tailscale/corp#47886

Change-Id: Ie82f961b016f78895793d801929a4fa11ebf7fd8

Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-09-11 14:07:53 -06:00

..

cert.go

ipn/localapi,client/local: honour Retry-After on cert rate-limit (#20315)

2026-07-08 13:34:40 +01:00

debug_test.go

ipn/localapi: require local admin for dev-set-state-store (#21222)

2026-09-11 14:07:53 -06:00

debug.go

ipn/localapi: require local admin for dev-set-state-store (#21222)

2026-09-11 14:07:53 -06:00

debugderp.go

tailcfg: replace int with DERPRegionID for additional type safety (#20646)

2026-08-19 16:25:50 -07:00

disabled_stubs.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

localapi_drive.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

localapi_test.go

tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639)

2026-08-07 16:30:35 -07:00

localapi.go

cmd/tailscale/cli: add tailscale exit-node suggest --force-probe

2026-07-02 20:26:27 -07:00

pprof.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

serve.go

ipn,ipn/localapi: require local admin to serve Unix domain sockets

2026-06-03 09:45:02 -06:00

syspolicy_api.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

tailnetlock.go

all: rename NetworkLock functions/types to TailnetLock

2026-06-08 13:14:28 +01:00