Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-9332

Improve security by only giving programming rights to scripts signed by a privileged user

    XMLWordPrintable

Details

    • New Feature
    • Resolution: Unresolved
    • Major
    • None
    • 5.1
    • Security
    • None
    • Unknown

    Description

      The actual PR system has many flaws, most of them being due to the fact that PR are given to documents and not to scripts. To fix these issues, we should introduce the concept of "signed" scripts : when a privileged user wants to give PR to a script, he would sign it. Then a script would be granted PR if and only if we can find a valid signature for it.

      Attachments

        Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-10168 Source metadata should be set to a document reference after parsing any content related to a document

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. XWIKI-9577 Improve Crypto API for full PKI support

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XCOMMONS-543 Add support for Cryptographic Message Syntax (CMS) signatures

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-13903 Add the ability to install signed JAR extensions without programming rights

          • Major - Major loss of function.
          • Open

          Activity

            People

              Unassigned Unassigned
              thomas_delafosse Thomas Delafosse
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: