Story #6642

[API] Include a mechanism to automatically trust some clients

Added by Nico César over 3 years ago. Updated over 3 years ago.

Status:
New
Priority:
Normal
Assigned To:
-
Category:
API
Target version:
Start date:
07/16/2015
Due date:
% Done:

0%

Estimated time:
Story points:
-

Description

"Trusted client setting" in http://doc.arvados.org/install/install-workbench-app.html deployments more complicated.

Many projects use the "user-admin-password-admin" technique on fresh installation to simplify things. Once everything is installed then a password change or a new admin user can take place. Of course if the user decides to leave it after the installation and it's a production server, this will mean a security problem for the user. But my guess that no one that is concearn about seciriyt will leave the default setting of any installation

That said, creating a well known token for that admin user, will enable us to create other objects while deploying a cluster.

History

#1 Updated by Nico César over 3 years ago

  • Target version set to Bug Triage

#2 Updated by Brett Smith over 3 years ago

  • Subject changed from Create an initial ADMIN user with a well known token to [API] Include a mechanism to automatically trust some clients
  • Category set to API
  • Target version changed from Bug Triage to 2015-09-02 sprint

#3 Updated by Brett Smith over 3 years ago

  • Target version changed from 2015-09-02 sprint to Arvados Future Sprints

Also available in: Atom PDF