Open-EO / Open-EO/openeo-python-client

Find better method to protect PrivateJsonFile on Windows

Open
#400 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

architecture auth configuration
Dominant language
Python
Stars
217
Forks
56
Avg merge
1d 22h
Merged PRs (30d)
2

Description

Find a better way to protect the PrivateJsonFile on Windows that doesn't rely on Unix file permissions, because that is just not working very well.

This is a follow up ticket for:
Problem

We tried oschmod as a solution to restrict access to the PrivateJsonFile on Windows, because it seems to have a better implementation of Unix file permissions, though it still has limitations.

However, it is now clear that we have users for whom the oschmod solution did not work, so this route is a bit of a dead end.

Windows has an entirely different system for file permissions, and there can be a lot of other things that may prevent users from restricting access to files they have file ownership of. (Possibly there are security policies and such that prevent this)

To be decided

A) Either we just accept that on Windows the PrivateJsonFile will not be as strongly protected as on Linux and Mac OS and leave it at that.

Or B) we need to find an entirely different protection method on Windows that is better supported than Unix-style file permissions.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading issue 387 and PR 399, then review the current oschmod-based protection of PrivateJsonFile described there. Investigate Windows file-permission constraints and possible alternatives; done means reaching and documenting a decision between accepting weaker protection and adopting a better-supported Windows method.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.