search

UCLA-Rocket-Project / OLD-Ares2022-2023

Central Repository for Ares Software
3 stars 0 forks source link

Properly set permissions for Grafana viewing/editing via fix Grafana config file. #14

Open harrisonCassar opened 1 year ago

harrisonCassar commented 1 year ago

In order to support leak checks being performed before the 10/29 Cold Flow, last-minute changes to Grafana's config file located at the path /etc/grafana/grafana.ini (refer to https://grafana.com/docs/grafana/latest/setup-grafana/installation/debian/ for more information), before restarting the grafana-server service. This fundamentally puts all Dashboards at a risk for accidental modification by unauthenticated users.

We should revert this, and do this permissions specification PROPERLY.

More thought to be done on this (perhaps have a separate admin account, and viewer anonymous?).

philipdoucla commented 1 year ago

Moved to Low Priority due to other more important work in pipeline (config files + deployment stuff #16). Risk is low, due to low number of users (only truly Software team, and one or two operators per test operation).

~ TRC 1/23/23