cloudsidedev / appside

Multitenant environment automation.
http://cloudside.ch
GNU Affero General Public License v3.0
38 stars 7 forks source link

Preventing encrypted data being overwritten by different user #116

Closed watzak closed 6 years ago

watzak commented 6 years ago

Hello @ivomarino , hello @89luca89

Did u already thought on implementing a way to prevent that encrypted data can be overwritten by users?

If not, have a look at https://www.vaultproject.io/

Cheers watzak ;)

ivomarino commented 6 years ago

@watzak appflow checkin actually should prevent exactly this, it ensures that sensitive data is encrypted and pushes this to the repo. Obviously you could "override" this manually and push unencrypted stuff to the repo. Supporting the vaultproject.io as backend for keeping sensitive data could be a good improvement anyway, thanks for the hint. Can we consider this issue more an "enhancement" for future nice-to-have?

watzak commented 6 years ago

Sure, it's more considered as a nice to have feature in the future ;)

ivomarino commented 6 years ago

@watzak ok, I'll close this then as far it's not considered a real bug or blocker, we can reopen it again asap we come along this topic or similar. Thanks for the suggestion in the meantime.