boris/keywarden
1
1 Fork 0
Code Issues 17 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Enforce Granular Access Scopes (request_logs, request_users) #9

New Issue
Open
opened 2026-02-16 14:33:35 +00:00 by boris · 0 comments
boris commented 2026-02-16 14:33:35 +00:00
Owner
Copy link
Copy source

As an approver I want access request scopes to be enforced separately in order for me to grant only the minimum required permissions.

Acceptance Criteria:

Within 14 calendar days, approved request_logs grants only log-view capability.
Within 14 calendar days, approved request_users grants only server-account visibility/management capability.
Revoking or expiring a request removes scoped permissions within 60 seconds.
Automated tests cover approve, revoke, expire, and mixed-scope scenarios.
As an approver I want access request scopes to be enforced separately in order for me to grant only the minimum required permissions. Acceptance Criteria: Within 14 calendar days, approved request_logs grants only log-view capability. Within 14 calendar days, approved request_users grants only server-account visibility/management capability. Revoking or expiring a request removes scoped permissions within 60 seconds. Automated tests cover approve, revoke, expire, and mixed-scope scenarios.
boris added this to the Minumum Marketable Product milestone 2026-02-16 14:33:35 +00:00
boris added the Kind/Security
Priority
High
2
 labels 2026-02-16 14:33:35 +00:00
boris self-assigned this 2026-02-16 14:33:35 +00:00
boris added this to the Keywarden project 2026-02-16 14:33:35 +00:00
boris moved this to In Progress in Keywarden on 2026-03-28 21:48:42 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Medium
3
The priority is medium
Priority
Low
4
The priority is low
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
Status
Abandoned
3
Somebody has started to work on this but abandoned work
No labels Kind/Security
Priority
High
2
Milestone
No items
No Milestone Minumum Marketable Product
Projects
Clear projects
No projects
Keywarden
In Progress
Assignees
Clear assignees
boris (George Wilkinson)
No Assignees boris
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: boris/keywarden#9