Explicitly allow configDB keys #628
1 changed files with 13 additions and 3 deletions
|
@ -254,9 +254,19 @@ def run(["check-allowed"]) do
|
|||
whitelisted = Enum.filter(raw, &ConfigurableFromDatabase.whitelisted_config?/1)
|
||||
raw_map = MapSet.new(raw)
|
||||
whitelisted_map = MapSet.new(whitelisted)
|
||||
IO.puts("Config keys defined in description.exs but not listed as explicitly allowed in the db")
|
||||
IO.puts(" Please check that standard admins should not need to touch the listed settings whilst the server is live.")
|
||||
IO.puts(" !! Please remember that admins are not neccesarily sysadmins nor are they immune to oauth/password leakage.")
|
||||
|
||||
IO.puts(
|
||||
"Config keys defined in description.exs but not listed as explicitly allowed in the db"
|
||||
)
|
||||
|
||||
IO.puts(
|
||||
" Please check that standard admins should not need to touch the listed settings whilst the server is live."
|
||||
)
|
||||
|
||||
IO.puts(
|
||||
" !! Please remember that admins are not neccesarily sysadmins nor are they immune to oauth/password leakage."
|
||||
)
|
||||
|
||||
IO.puts("-------------")
|
||||
|
||||
MapSet.difference(raw_map, whitelisted_map)
|
||||
|
|
Loading…
Reference in a new issue