-
Feature
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
None
-
False
-
-
False
-
-
A customer has requested to allow their users to use a shared namespace for all their web terminals, rather than each user having their own namespace for their own web terminals.
Attention needs to be given to ensure this feature does not lead to any security issues where users could gain sensitive information by being able to view the devworkspace, pods, etc. of other users web-terminals. We currently prevent users who arent the creator of a web terminal from exec'ing into a web terminals pod, but this security measure might not be sufficient to prevent other security issues.
Related issue: https://issues.redhat.com/browse/WTO-286