Chris Lu 29981f8d24 sftp: match permission paths on path-component boundaries (#10311) ...

* sftp: match permission paths on path-component boundaries

Permission checks compared paths with raw string prefixes, so a
permission entry for /tenants/alice also matched sibling paths such as
/tenants/alice-archive, letting a scoped user read and overwrite
another tenant's files. The home directory containment check had the
same flaw. Route both through pathWithin, which cleans the paths and
requires exact equality or a separator-delimited descendant.

* sftp: clean permission path into a local when ranking matches

2026-07-10 22:10:01 -07:00

..

auth

sftpd: support SSH user certificates signed by a trusted CA (#9815)

2026-06-03 22:32:47 -07:00

user

Don't mangle filer paths with the OS separator on Windows (#9878)

2026-06-08 13:56:02 -07:00

utils

Fix sftp performances and add seaweedfs all-in-one deployment (#6792)

2025-05-26 00:50:48 -07:00

sftp_file_reader.go

convert error fromating to %w everywhere (#6995)

2025-07-16 23:39:27 -07:00

sftp_file_writer.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

sftp_filer.go

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

sftp_permissions_test.go

sftp: match permission paths on path-component boundaries (#10311)

2026-07-10 22:10:01 -07:00

sftp_permissions.go

sftp: match permission paths on path-component boundaries (#10311)

2026-07-10 22:10:01 -07:00

sftp_server_test.go

fix: SFTP HomeDir path translation for user operations (#7611)

2025-12-03 13:42:05 -08:00

sftp_server.go

Fix SFTP file upload failures with JWT filer tokens (#8448)

2026-02-25 14:30:21 -08:00

sftp_service.go

sftpd: support SSH user certificates signed by a trusted CA (#9815)

2026-06-03 22:32:47 -07:00