searchengines-web/MeiliSearch
searchengines-web/MeiliSearch
1
0
Fork 0
mirror of https://github.com/meilisearch/MeiliSearch synced 2025-07-15 13:58:36 +02:00
Code Issues Releases Wiki Activity

Remove KeysGet from AllGet

Browse source
This commit is contained in:
Mubelotix 2025-06-24 17:40:06 +02:00
parent 2d6dc83940
commit c4a96b40eb
No known key found for this signature in database
GPG key ID: 0406DF6C3A69B942
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
crates/meilisearch-types/src/keys.rs
View file

@ -151,7 +151,7 @@ impl Key {
name: Some("Default Read-Only Admin API Key".to_string()),
description: Some("Use it to peek into the instance in a read-only mode. Caution! Do not expose it on a public frontend. It would give access to all other keys".to_string()),
uid,
actions: vec![Action::AllGet],
actions: vec![Action::AllGet, Action::KeysGet],
indexes: vec![IndexUidPattern::all()],
expires_at: None,
created_at: now,
@ -444,14 +444,14 @@ impl Action {
SnapshotsCreate => false,
Version => true,
KeysAdd => false,
KeysGet => true,
KeysGet => false, // Disabled in order to prevent privilege escalation
KeysUpdate => false,
KeysDelete => false,
ExperimentalFeaturesGet => true,
ExperimentalFeaturesUpdate => false,
NetworkGet => true,
NetworkUpdate => false,
ChatCompletions => false, // Disabled because it might trigger generation of new chats.
ChatCompletions => false, // Disabled because it might trigger generation of new chats
ChatsGet => true,
ChatsDelete => false,
ChatsSettingsGet => true,