[ 
https://issues.apache.org/jira/browse/KNOX-2777?focusedWorklogId=791089&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-791089
 ]

ASF GitHub Bot logged work on KNOX-2777:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 14/Jul/22 18:24
            Start Date: 14/Jul/22 18:24
    Worklog Time Spent: 10m 
      Work Description: moresandeep commented on PR #608:
URL: https://github.com/apache/knox/pull/608#issuecomment-1184764573

   Would be better to update the title indicating this is just adding configs 
to support this feature i.e. "Add configurations for concurrent session 
verifier feature" - feel free to change the wordings.




Issue Time Tracking
-------------------

    Worklog Id:     (was: 791089)
    Time Spent: 20m  (was: 10m)

> Implement concurrent session verifier
> -------------------------------------
>
>                 Key: KNOX-2777
>                 URL: https://issues.apache.org/jira/browse/KNOX-2777
>             Project: Apache Knox
>          Issue Type: Sub-task
>          Components: Server
>    Affects Versions: 2.0.0
>            Reporter: Sandor Molnar
>            Priority: Major
>             Fix For: 2.0.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> The following needs to be implemented in the scope of this JIRA:
>  * we need 4 new Gateway-level configurations:
>  ** privileged user list (defaults to an empty collection)
>  ** non-privileged user list (defaults to an empty collection)
>  ** session limit for privileged users (defaults to 3)
>  ** session limit for non-privileged users (defaults to 2)
>  * In addition to the new configs, a verifier has to be implemented that 
> enforces the following business logic: if a user is listed in the 
> above-introduced privileged/non-privileged collection AND is about to pass a 
> configured session limit the verification should fail. The verification 
> should succeed if the given user is declared neither a privileged nor a 
> non-privileged user.
> The new verifier implementation may be placed in the {{gateway-util-common}} 
> project for now.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to