tree 6f3fd06f7857300f1a077fcb7b32c64ccf4ccc74
parent 1e3f85e68076b6270ce3afcae71a88f5b71fbfb8
author cm-jishnu <jishnunambiarcm@duck.com> 1669974327 -0600
committer Jishnu C M <jishnunambiarcm@duck.com> 1671166671 +0000

Restrict use of subfolder in configfiles path

GET function on the config files path now lists all the contents
including sub directories. Creation of subdirectories under config files
is not allowed from the UI, however its possible to create manually.

If we try to access a subfolder with GET command, bmcweb handle the
folder name as file name and crashes trying to open.
Hence we limit the use of subfolder under config files by not listing
them in the response of the GET command. And returning an error if the
user is trying to run a GET on subfolder created manually.

Tested:
Create subfolder under configfiles path

curl -k -H "X-Auth-Token: $bmc_token" -X GET -D patch1.txt
https://${bmc}/ibm/v1/Host/ConfigFiles

Without fix:
Lists all contents of the ConfigFiles folder

With Fix:
lists only the regular files

Run the command with subfolder
curl -k -H "X-Auth-Token: $bmc_token" -X GET -D patch1.txt
https://${bmc}/ibm/v1/Host/ConfigFiles/testfolder

Without fix:
bmcweb crashes

With the fix:
“Description”: “Resource Not Found”

Change-Id: I71ef5523c6bc425e880a28a6e1175c677ef0a102
Signed-off-by: Jishnu C M <jishnunambiarcm@duck.com>