• N
    vz: add ACL checks to API calls · 018b4ae1
    Nikolay Shirokovskiy 提交于
      vzDomainMigrateConfirm3Params is whitelisted. Otherwise we need to
    move removing domain from domain list from perform to confirm
    step. This would further imply adding a flag and check that migration
    is in progress to prohibit mistakenly (maliciously) removing domains
    on confirm step. vz version of p2p also need to be fixed to include confirm step.
    One would also need to add means to cleanup pending migration
    on client disconnect as now is has state across several API
    calls.
    
      On the other hand current version of confirm step is totaly
    harmless thus it is easier to whitelist it at the moment.
    Signed-off-by: NNikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
    Signed-off-by: NMaxim Nestratov <mnestratov@virtuozzo.com>
    018b4ae1
Makefile.am 97.9 KB