diff options
| author | Russ Allbery <rra@stanford.edu> | 2012-10-03 17:35:09 -0700 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2012-10-03 17:35:09 -0700 |
| commit | 7066c8e0c0ea5ce30311459fb1a857b583e63c06 (patch) | |
| tree | 7bf86855323d012036cd5e90c8a351289a0c899e | |
| parent | c82a0a11a1306a805a3db5813e26bef72984db4c (diff) | |
Add splitting get and update to TODO
| -rw-r--r-- | TODO | 6 |
1 files changed, 6 insertions, 0 deletions
@@ -64,6 +64,12 @@ Server Interface: then allowing that object to be downloaded anonymously from that IP. Relies on support for Kerberos anonymous authentication. + * WALLET-64: Split "get" and "update" in semantics, and only do keytab + rekeying on update. "get" would not be permitted unless the keytab was + flagged as unchanging, and update would still change even an unchanging + keytab (maybe). Or, alternately, maybe we allow get of any keytab? + Requires more thought. + ACLs: * WALLET-23: Error messages from ACL operations should refer to the ACLs |