Uploaded image for project: '{RETIRED} SCRIBO'
  1. {RETIRED} SCRIBO
  2. SCRIBO-33

Add ParameterStorageService to handle sensitive parameters which can not be stored in plaintext.

    XMLWordPrintable

Details

    • New Feature
    • Resolution: Fixed
    • Minor
    • Platform
    • None
    • parameter storage security

    Description

      Some component parameters are sensitive and can not be stored in the KnowledgeBase (for document sources) or in plain configuration files (like the workbench) or XWiki objects.

      We need a storage service for these parameters with an interface similar to:

      interface ParameterStorage {
        Object getParameter(String componentName, String parameterName);
        void setParameter(String componentName, String parameterName, Object parameterValue);
      }
      

      To call it, the client should just have to do:

      Scribo.getParameterStorageService().getParameter("myDS", "password")
      

      Specifying the implementation could be done trough a JVM parameter like:
      -DscriboParameterStorage=some.package.KDEWalletStorage

      Other configuration of this service (like secret key, path, etc.) can be done trough JVM parameters as well and the storage service will be permanently accessible. This way, the parameters are accessible inside the JVM, but not from the outside (filesystem or other JVMs).

      Attachments

        Issue Links

          Activity

            People

              enygma Eduard Moraru
              enygma Eduard Moraru
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: