Closed Bug 1155448 Opened 9 years ago Closed 9 years ago

meta: [jonasfj-Q2-goal] Lock down temporary credentials issues by auth.taskcluster.net

Categories

(Taskcluster :: General, defect)

Product:
Taskcluster
Component:
General
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: jonasfj, Assigned: jonasfj)

References

Details

Right now people get '*' scopes that's not a good idea...
Fixed a while ago.

People still get wide scopes... But not "auth:*",
We should work to lock this down further, but for now this have unblocked signing server, as it can use a scope prefix not with temp creds by auth.tc.n
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Component: TaskCluster → General
Product: Testing → Taskcluster
Target Milestone: --- → mozilla41
Version: unspecified → Trunk
Resetting Version and Target Milestone that accidentally got changed...
Target Milestone: mozilla41 → ---
Version: Trunk → unspecified
You need to log in before you can comment on or make changes to this bug.