Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't save secure information in downloaded workflows - prompt workflow uploader for security info #549

Open
Chris-Schnaufer opened this issue Sep 7, 2021 · 0 comments
Labels
DPP UI Drone Processing Pipeline Web User Interface task Something to get done

Comments

@Chris-Schnaufer
Copy link
Member

Task to do
Remove current saving of security information and have workflow uploader provide their security information to access remote files (such as on IRODS)

Reason
Even with security in place, there's a risk that someone's security information (eg: password) could be made available as plain text. By removing it entirely from a saved workflow this risk is mitigated. Removing it from the workflow means that the uploader of a workflow needs to provide security information to allow access to remote stores.

Result
No security information is stored in a workflow. The uploader is prompted to provide needed security information

Notes
The software will need to detect when security information is needed and prompt the user to enter it

@Chris-Schnaufer Chris-Schnaufer added task Something to get done DPP UI Drone Processing Pipeline Web User Interface labels Sep 7, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
DPP UI Drone Processing Pipeline Web User Interface task Something to get done
Projects
None yet
Development

No branches or pull requests

1 participant