Automated provisioning: Master API key should be able to run data managers

galaxyproject / hack-the-galaxy-gcc2017

2 stars 2 forks source link

Automated provisioning: Master API key should be able to run data managers #24

Open rhpvorderman opened 7 years ago

rhpvorderman commented 7 years ago

See https://github.com/galaxyproject/galaxy/issues/4084. I dislike the idea of using an admin api key for this. Provisioning should be run by a non-priviledged user, not by an omnipotent one. Also, this will also allow to set up a galaxy instance in one go.

mvdbeek commented 7 years ago

I don't think the admin api key is more or less privileged than the master api key. The only difference is that the master API key can't create histories/datasets etc. I believe all admins (whether true admins or just using the master api key) are "omnipotent", but I may be wrong.