Skip to content

Kuscia在P2P部署时,如果任务请求不是secretpad等平台发来的,而是运维人员在kuscia镜像中恶意启动的,是否有越权问题呢? #490

Closed
@WandQ

Description

Issue Type

Api Usage

Search for existing issues similar to yours

Yes

Kuscia Version

kusciaImage版本:0.13.0b0

Link to Relevant Documentation

No response

Question Details

如:Alice和Bob相互授权了表scheme可见,此时,Alice可以在Kuscia容器内编排任意任务,可以是PSI,SCQL,甚至是PIR(如有)直接查询数据。而这个过程对于Bob是无感的,是否会导致数据泄露风险呢?有办法解决或者缓解么?

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions