Leonard Lyubich e54b52ec03 [#1420] object/acl: Fix correlation of object session to request ... In previous implementation of `neofs-node` app object session was not checked for substitution of the object related to it. Also, for access checks, the session object was substituted instead of the one from the request. This, on the one hand, made it possible to inherit the session from the parent object for authorization for certain actions. On the other hand, it covered the mentioned object substitution, which is a critical vulnerability. Next changes are applied to processing of all Object service requests: - check if object session relates to the requested object - use requested object in access checks. Disclosed problem of object context inheritance will be solved within Signed-off-by: Leonard Lyubich <ctulhurider@gmail.com>		2022-10-07 10:34:38 +03:00
..
create.go	[#1684] *: Fix linter warnings	2022-08-15 10:57:31 +03:00
root.go	[#1216] neofs-cli: Allow to create and save session token	2022-04-25 10:47:43 +03:00
util.go	[#1420] object/acl: Fix correlation of object session to request	2022-10-07 10:34:38 +03:00