13 Mai
2025
13 Mai
'25
11:38
nav-users@lister.sikt.no said:
- Lock down API access for unprivileged users
Could this have unexpected consequences?
Non-admin users does now get an Ajax error when viewing ports on a device. (See picture)
From Apache access log: "GET /api/1/interface/?page_size=10000&netbox=5733&_=1747125228426 HTTP/1.1" 403 63
When logged in with my admin user the logs shows "GET /api/1/interface/?page_size=10000&netbox=5733&ifclass=trunk&last_used=on& _=1747125489227 HTTP/1.1" 200 36615
--Ingeborg
--
Ingeborg Østrem Hellemo -- ingeborg.hellemo@uit.no
Dep. of Information Technology --- Univ. of Tromsø