Open-EO / Open-EO/openeo-python-client
Find better method to protect PrivateJsonFile on Windows
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 217
- Forks
- 56
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 2
Description
Find a better way to protect the PrivateJsonFile on Windows that doesn't rely on Unix file permissions, because that is just not working very well.
This is a follow up ticket for:
- Issue https://github.com/Open-EO/openeo-python-client/issues/387
- and PR: https://github.com/Open-EO/openeo-python-client/pull/399
Problem
We tried oschmod as a solution to restrict access to the PrivateJsonFile on Windows, because it seems to have a better implementation of Unix file permissions, though it still has limitations.
However, it is now clear that we have users for whom the oschmod solution did not work, so this route is a bit of a dead end.
Windows has an entirely different system for file permissions, and there can be a lot of other things that may prevent users from restricting access to files they have file ownership of. (Possibly there are security policies and such that prevent this)
To be decided
A) Either we just accept that on Windows the PrivateJsonFile will not be as strongly protected as on Linux and Mac OS and leave it at that.
Or B) we need to find an entirely different protection method on Windows that is better supported than Unix-style file permissions.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading issue 387 and PR 399, then review the current oschmod-based protection of PrivateJsonFile described there. Investigate Windows file-permission constraints and possible alternatives; done means reaching and documenting a decision between accepting weaker protection and adopting a better-supported Windows method.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100