Skip to content

fix: user with role topcoder user shouldn't be allowed to create/modify challenges #637

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 16 commits into from
May 18, 2023

Conversation

rakibansary
Copy link
Contributor

No description provided.

Gunasekar-K and others added 16 commits May 4, 2023 15:16
…s-fix

Security fix for root file system access
Yarn cache issue due to root file system security
…s-fix

Yarn cache issue due to root file system security
This reverts commit 838f096.
This reverts commit 23ab113.
- Update tc-deploy-scripts to v1.4.15 to set environment variables for enabling ecs-containers-readonly-access
- Modify Dockerfile to replace 'yarn start' with 'node /challenge-api/app.js' to ensure compatibility with read-only file systems

Enabling ecs-containers-readonly-access ensures that the container file system is read-only, reducing the risk of unauthorized modifications to the application files during runtime. Replacing 'yarn start' with 'node /challenge-api/app.js' addresses potential issues with Yarn requiring a writable file system for certain operations, ensuring a smooth deployment on a read-only environment.

Signed-off-by: Rakib Ansary <[email protected]>
…readonly-access

fix: enable ecs-containers-readonly-access and update docker cmd
fix: user with topcoder user role should not be allowed create/modify/delete challenges
@rakibansary rakibansary merged commit 69dacae into master May 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants