docs: update authorization matrix progress
This commit is contained in:
parent
64959199b8
commit
602032bfac
1 changed files with 3 additions and 3 deletions
|
|
@ -152,13 +152,13 @@ it.
|
||||||
|
|
||||||
Goal: finish the authorization and remote-input audit before deployment.
|
Goal: finish the authorization and remote-input audit before deployment.
|
||||||
|
|
||||||
- `[ ]` Complete remote authorization matrix coverage.
|
- `[~]` Complete remote authorization matrix coverage.
|
||||||
Acceptance criteria:
|
Acceptance criteria:
|
||||||
- `[ ]` Denied and allowed paths are tested for CAS, KV, DB, document,
|
- `[ ]` Denied and allowed paths are tested for CAS, KV, DB, document,
|
||||||
pubsub, pipe, SSH proxy/admin shell, SSH cert metadata, and revocations.
|
pubsub, pipe, SSH proxy/admin shell, SSH cert metadata, and revocations.
|
||||||
- `[ ]` Every remote mutating or service-opening operation has an explicit
|
- `[x]` Every remote mutating or service-opening operation has an explicit
|
||||||
resource capability check before mutation or host access.
|
resource capability check before mutation or host access.
|
||||||
- `[ ]` The matrix fails tests when a new remote operation lacks a guard.
|
- `[x]` The matrix fails tests when a new remote operation lacks a guard.
|
||||||
|
|
||||||
- `[ ]` Add adversarial identity and bearer tests.
|
- `[ ]` Add adversarial identity and bearer tests.
|
||||||
Acceptance criteria:
|
Acceptance criteria:
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue