Leonard Lyubich ead4513feb [#525] ir/container: Verify operations with session token ... Session token can be presented `Put`, `Delete` and `SetEACL` notification events. IR should consider this case as issuing a power of attorney to a third party. Thus, checking the eligibility for an operation should be complicated: - token owner should be the owner of the related container; - the intent must be signed with a session key; - the power of attorney must be signed by the owner of the container. Omitted checks (TBD): - session token should have container session context; - the verb of the context should correspond to the operation. Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>		2021-05-27 17:07:20 +03:00
..
core	[#525] core/container: Extend removal witness with session token	2021-05-27 12:03:49 +03:00
innerring	[#525] ir/container: Verify operations with session token	2021-05-27 17:07:20 +03:00
local_object_storage	[#541] blobstor/fstree: fix a bug in Iterate()	2021-05-20 19:24:42 +03:00
metrics	[#426] Put prometheus behind pkg/metrics	2021-03-17 10:58:00 +03:00
morph	[#525] morph/container: Remove binding key argument from Put call	2021-05-27 12:03:49 +03:00
network	[#549] clientCache: Add TLS to client	2021-05-27 17:07:04 +03:00
services	[#549] network/cache: Change Get signature	2021-05-27 17:07:04 +03:00
util	[#521] *: use stdlib errors package	2021-05-19 16:42:54 +03:00