AgPipeline / issues-and-projects

Repository for issues and projects
BSD 3-Clause "New" or "Revised" License
3 stars 1 forks source link

Don't save secure information in downloaded workflows - prompt workflow uploader for security info #549

Open Chris-Schnaufer opened 3 years ago

Chris-Schnaufer commented 3 years ago

Task to do Remove current saving of security information and have workflow uploader provide their security information to access remote files (such as on IRODS)

Reason Even with security in place, there's a risk that someone's security information (eg: password) could be made available as plain text. By removing it entirely from a saved workflow this risk is mitigated. Removing it from the workflow means that the uploader of a workflow needs to provide security information to allow access to remote stores.

Result No security information is stored in a workflow. The uploader is prompted to provide needed security information

Notes The software will need to detect when security information is needed and prompt the user to enter it