scp to agentless nodes allowed in spite of RBAC denial #24949
Labels
agentless
bug
scp
test-plan-problem
Issues which have been surfaced by running the manual release test plan
Expected behavior:
When
ssh_file_copy
is set tofalse
in a user's role, they are blocked from usingtsh scp
for any target node, including agentless nodes.Current behavior:
tsh scp
and OpenSSHscp
both work to copy files to/from agentless nodes without error.The action is correctly denied for teleport nodes.
I'm not sure if it's technically even possible to block file copies, but the test plan indicates the expected behaviour is to block it. So we should either fix this or update the test plan (and docs).
Bug details:
ssh_file_copy: false
. Assign the role to a user and trytsh scp file user@agentless-node:
The text was updated successfully, but these errors were encountered: