Requesting a macaroon with activities DOWNLOAD,UPLOAD against XRootD 4.9.0, I get the following the logfile:

190301 15:52:17 2542 sysMacaroonGen: ID=<this_is_some_uuid>, name=/C=DE/<remaining_part_of_cn>, host=[::ffff:<my_ipv4_address>], vorg=atlas, role=NULL, groups=/atlas /atlas/de /atlas/de/Role=NULL /atlas/de/Role=NULL/Capability=NULL, endorsements=/atlas/de/Role=NULL/Capability=NULL, activity=activity:READ_METADATA,UPLOAD,DOWNLOAD,DELETE,MANAGE,UPDATE_METADATA,LIST, expires=<some_date>

i.e. this lists all activities, potentially those the original requestor had and not only those the issued with the macaroon.

It might just be a logging issue, but that should be checked.

ping @bbockelm

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/xrootd/xrootd","title":"xrootd/xrootd","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/xrootd/xrootd"}},"updates":{"snippets":[{"icon":"DESCRIPTION","message":"Macaroon generation lists wrong activities in log (#921)"}],"action":{"name":"View Issue","url":"https://github.com/xrootd/xrootd/issues/921"}}} [ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/921", "url": "https://github.com/xrootd/xrootd/issues/921", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1