已合并
fix: only allow administrator access emergency user info #149
LiJiang创建于 1月20日
fix: only allow administrator access emergency user info #149
已合并
共 4 个文件变更+6-5
| @@ -1,5 +1,6 @@ | |||
| 1 | All notable changes to this project will be documented in this file. | 1 | All notable changes to this project will be documented in this file. |
| 2 | ## [1.110.13] - 2026-2-6 | 2 | ## [1.110.13] - 2026-2-6 |
| 3 | +修复非管理员可以查看紧急用户问题 | ||
| 3 | 修复IPMI Get user access返回enable status错误问题 | 4 | 修复IPMI Get user access返回enable status错误问题 |
| 4 | 5 | ||
| 5 | ## [1.110.12] - 2026-2-2 | 6 | ## [1.110.12] - 2026-2-2 |
| @@ -38,7 +39,7 @@ feat:支持框内通信账户扩展管理 | |||
| 38 | ## [1.110.1] - 2026-1-15 | 39 | ## [1.110.1] - 2026-1-15 |
| 39 | 支持框内通信使能开启后不限制删除CA证书 | 40 | 支持框内通信使能开启后不限制删除CA证书 |
| 40 | 41 | ||
| 41 | -## [1.100.35] - 2026-01-15 | 42 | +## [1.110.0] - 2026-01-15 |
| 42 | fix:优化锁定判断延时，解决满用户场景下锁定判断较长的问题 | 43 | fix:优化锁定判断延时，解决满用户场景下锁定判断较长的问题 |
| 43 | 44 | ||
| 44 | ## [1.100.34] - 2025-12-27 | 45 | ## [1.100.34] - 2025-12-27 |
| @@ -219,7 +219,7 @@ local AccountService = { | |||
| 219 | ['maximum'] = 17, | 219 | ['maximum'] = 17, |
| 220 | ['options'] = {['emitsChangedSignal'] = 'true'}, | 220 | ['options'] = {['emitsChangedSignal'] = 'true'}, |
| 221 | ['usage'] = {'PoweroffPer'}, | 221 | ['usage'] = {'PoweroffPer'}, |
| 222 | - ['privilege'] = {['read'] = {'ReadOnly'}, ['write'] = {'UserMgmt'}}, | 222 | + ['privilege'] = {['read'] = {'UserMgmt'}, ['write'] = {'UserMgmt'}}, |
| 223 | ['validator'] = account_service_intf_types.EmergencyLoginAccountId | 223 | ['validator'] = account_service_intf_types.EmergencyLoginAccountId |
| 224 | }, | 224 | }, |
| 225 | ['SNMPv3TrapAccountId'] = { | 225 | ['SNMPv3TrapAccountId'] = { |
| @@ -422,7 +422,7 @@ local AccountService = { | |||
| 422 | }, | 422 | }, |
| 423 | ['MinPasswordValidDays'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, | 423 | ['MinPasswordValidDays'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, |
| 424 | ['MaxPasswordValidDays'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, | 424 | ['MaxPasswordValidDays'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, |
| 425 | - ['EmergencyLoginAccountId'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.UserMgmt}, | 425 | + ['EmergencyLoginAccountId'] = {['read'] = privilege.UserMgmt, ['write'] = privilege.UserMgmt}, |
| 426 | ['SNMPv3TrapAccountId'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.BasicSetting}, | 426 | ['SNMPv3TrapAccountId'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.BasicSetting}, |
| 427 | ['InactiveDaysThreshold'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, | 427 | ['InactiveDaysThreshold'] = {['read'] = privilege.ReadOnly, ['write'] = privilege.SecurityMgmt}, |
| 428 | ['WeakPasswordDictionaryEnabled'] = { | 428 | ['WeakPasswordDictionaryEnabled'] = { |
| @@ -105,7 +105,7 @@ | |||
| 105 | }, | 105 | }, |
| 106 | "EmergencyLoginAccountId": { | 106 | "EmergencyLoginAccountId": { |
| 107 | "privilege": { | 107 | "privilege": { |
| 108 | - "read": ["ReadOnly"], | 108 | + "read": ["UserMgmt"], |
| 109 | "write": ["UserMgmt"] | 109 | "write": ["UserMgmt"] |
| 110 | }, | 110 | }, |
| 111 | "default": 0, | 111 | "default": 0, |
| @@ -776,7 +776,7 @@ end | |||
| 776 | 776 | ||
| 777 | -- 测试增加用户中account_service业务逻辑 | 777 | -- 测试增加用户中account_service业务逻辑 |
| 778 | function TestAccount:test_account_service_add_account() | 778 | function TestAccount:test_account_service_add_account() |
| 779 | - local interface = login_interface or make_interface() | 779 | + local interface = make_interface() |
| 780 | self:add_test_account(3, interface) | 780 | self:add_test_account(3, interface) |
| 781 | 781 | ||
| 782 | local test_account = self.test_account_collection.collection[3] | 782 | local test_account = self.test_account_collection.collection[3] |