alibaba / alibaba/arthas

tunnel server能不能限制用户输入的命令

Open
#2,500 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
37.5k
Forks
7.6k
Avg merge
1d 22h
Merged PRs (30d)
4

Description

- [ ] 我已经在 [issues](https://github.com/alibaba/arthas/issues) 里搜索,没有重复的issue。

### 环境信息

* arthas-boot.jar-3.6
* 目标进程的JVM版本: 1.8
* tunnel-server-3.6

### 重现问题的步骤

我想要限制每个会话人的命令输入。

### 期望的结果

我想要限制每个会话人的命令输入,比如a用户能执行jvm,heapdump , b户能执行dashboard

Contributor guide

Open the contributing guide

Research direction

The request targets tunnel-server 3.6 and per-session command restrictions. Start by locating the tunnel-server session and command-handling entry points, then define how different users receive different command permissions. Done means permissions are enforced per session, including the requested jvm/heapdump versus dashboard example, with coverage for allowed and denied commands.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.