catborise 1227674d8f feat(security): implement P0 critical security fixes for API, console, and access control ... - Computes API: mark password as write_only in ComputeSerializer, restrict ComputeViewSet and architectures to IsAdminUser. - Instances API: enforce user ownership tenant isolation in InstanceViewSet.list, restrict MigrateViewSet and CreateInstanceViewSet to IsAdminUser, require IsAdminUser for mutating FlavorViewSet. - Storage, Network, and Interface APIs: restrict StorageViewSet, VolumeViewSet, NetworkViewSet, InterfaceViewSet to IsAdminUser. - AppSettings & NWFilters: protect appsettings and nwfilter views with @superuser_only (403 Forbidden for non-superusers). - noVNC Console: sign tokens with TimestampSigner (salt='console.novnc', max_age=600), verify signature and user authorization in novncd with backward-compatible fallback for debug/test mode. - Accounts: avoid hardcoded default admin password; generate cryptographically secure random password unless ADMIN_PASSWORD is set (preserve 'admin' in test runner). - gstfsd daemon: bind to 127.0.0.1 by default instead of 0.0.0.0. - Tests: added comprehensive test coverage for API security, token expiration/rejection, and view permissions (132 tests passing).		2026-09-27 10:50:09 +03:00
..
migrations	Add NWFilters	2018-09-21 19:11:17 +03:00
templates	bootstrap icon conversion fixes	2023-08-11 09:40:38 +03:00
__init__.py	Add NWFilters	2018-09-21 19:11:17 +03:00
apps.py	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
models.py	fix typos and rearrange imports & add new lines EOF	2020-06-04 15:22:55 +03:00
tests.py	feat(security): implement P0 critical security fixes for API, console, and access control	2026-09-27 10:50:09 +03:00
views.py	feat(security): implement P0 critical security fixes for API, console, and access control	2026-09-27 10:50:09 +03:00