Uploaded image for project: 'mod-pubsub'
  1. mod-pubsub
  2. MODPUBSUB-78

Insecure use of password for pub-sub user

    XMLWordPrintable

    Details

    • Template:
    • Sprint:
      EPAM-Veg Sprint 113
    • Story Points:
      3
    • Development Team:
      Vega
    • Release:
      R1 2021 Bug Fix
    • Epic Link:

      Description

      The pub-sub user and password are checked into GitHub as seen here. Also at database level, the password is stored as clear text in mod-pubsub."users" table. Please consider a more secure way to handle this.

      Steps

      • Contact to Vladimir S. and discuss a possible workaround
      • Ask the community for security storage
      • mod-config or okapi env params as a workaround
      • fix bug

      Additional Information

      Documentation of the current permission implementation: https://github.com/folio-org/mod-pubsub/blob/v2.0.3/README.md#permissions

        Attachments

          Issue Links

          blocks

          Task - A task that needs to be done. FOLIO-3134 Reconfigure container deployment for mod-pubsub in folio-ansible

          • TBD - To be determined
          • Closed
          defines

          Umbrella - MODPUBSUB-18 Security Manager

          • P3 - low priority level, item will be considered for inclusion in the next dev cycle
          • Closed

          New Feature - New feature requests UXPROD-2851 NFR: Data Import (Batch Importer for Bib Acq) & PubSub R2 2021 Juniper Technical, NFR, & Misc bug work

          • P2 - normal priority level, must be included in the current development cycle
          • Closed
          relates to

          Task - A task that needs to be done. MODPUBSUB-165 Release v2.0.6

          • P3 - low priority level, item will be considered for inclusion in the next dev cycle
          • Closed
          mentioned in

          Page Loading...

          Page Loading...

            Activity

              People

              Assignee:
              oleksandrkurash Alexander Kurash
              Reporter:
              hji Hongwei Ji
              Votes:
              1 Vote for this issue
              Watchers:
              18 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: