mirror of
https://github.com/portainer/portainer.git
synced 2025-07-21 06:19:41 +02:00
adf33385ce
* feat(containers): prevent non-admin users from running containers using the host namespace pid (#3970) * feat(containers): Prevent non-admin users from running containers using the host namespace pid * feat(containers): add rbac check for swarm stack too * feat(containers): remove forgotten conflict * feat(containers): init EnableHostNamespaceUse to true and return 403 on forbidden action * feat(containers): change enableHostNamespaceUse to restrictHostNamespaceUse in html * feat(settings): rename EnableHostNamespaceUse to AllowHostNamespaceForRegularUsers * feat(database): trigger migration for AllowHostNamespace * feat(containers): check container creation authorization Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com>
12 lines
272 B
Go
12 lines
272 B
Go
package migrator
|
|
|
|
func (m *Migrator) updateSettingsToDB24() error {
|
|
legacySettings, err := m.settingsService.Settings()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
legacySettings.AllowHostNamespaceForRegularUsers = true
|
|
|
|
return m.settingsService.UpdateSettings(legacySettings)
|
|
}
|