Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Initial admin user (1) should be creatable without password #20

Closed
gganssauge opened this issue Oct 19, 2016 · 6 comments
Closed

Initial admin user (1) should be creatable without password #20

gganssauge opened this issue Oct 19, 2016 · 6 comments

Comments

@gganssauge
Copy link

In my test portal I created a user in the admin group with kickstarter and removed the default admin user (id #1) from the admin group to mitigate the risk of a well-known admin user.
That had the unfortunate consequence that the portal-kong-adapter, portal-mailer and portal-chatbot containers did no longer start.
To mitigiate that risk anyway it would be useful to create the admin user without a passwort from the start - iff another admin user was configured.

@DonMartin76
Copy link
Member

This will be fixed in two ways:

  • It will be possible to remove the Admin User altogether
  • Each webhook/plugin service will be able to use the wicked-sdk to create its own Admin machine user
  • This makes it visible which webhook/service calls the API, and not only shows userId: 1

@DonMartin76
Copy link
Member

DonMartin76 commented Oct 27, 2016

This has been partly fixed: All services (kong adapter, mailer, chatbot) now - as of 0.10.0 use a service user to connect to the API, but it is still not possible to remove the '1' user altogether just yet.

@DonMartin76 DonMartin76 modified the milestones: 1.0.0, 0.10.0 Nov 4, 2016
@DonMartin76
Copy link
Member

Parts will surface in 0.10.0, but it's still not possible to remove the 1 user yet.

@DonMartin76
Copy link
Member

But it will be possible to define users

a) Without password
b) with a predefined customId

This makes it possible to e.g. predefine GitHub users ("customId": "Github:<id>") which without any additional configuration are administrators on the portal. Very neat.

@DonMartin76
Copy link
Member

It is since long possible to create users with a given custom ID, e.g. the Google-ID.

@DonMartin76
Copy link
Member

The most common use cases are possible by now. Closing this.

@DonMartin76 DonMartin76 modified the milestones: 1.0.0, 1.0.0-rc.1 Feb 21, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants