Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Web UI Authn & Authz (Tracking Issue) #25529

Closed
couchand opened this issue May 15, 2018 · 1 comment
Closed

Web UI Authn & Authz (Tracking Issue) #25529

couchand opened this issue May 15, 2018 · 1 comment
Labels
A-webui-security C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) meta-issue Contains a list of several other issues.

Comments

@couchand
Copy link
Contributor

couchand commented May 15, 2018 •
edited
Loading

Description

Lots of upcoming improvements to the web UI will be exposing potentially sensitive data, and a number of existing pages already do (see #23555). We don't want the web UI to be a security hole, so we need to properly authenticate & authorize users.

Related issues

Original report: #6307
Another general discussion: #18206
Obviates: #24992
Possibly related: #24989

Breakdown

Milestone Issue PR Description Progress
🛴 #25057 Environment variable to enable login 🏁
🛴 #24942 #24945 Exempt healthcheck from authn 🏁
🛴 #25171 #25195 Remember that the user has a session 🏁
🛴 #24939 #26066 UI components for login screen 🏁
🛴 #25005 Require login in web UI 🏁
🛴 #25784 #26062 Logout 🏁
🛴 #25785 #26053 Redirect to login if API call comes back forbidden 🏁
🗑 #25771 Race condition during startup 🗑
🚲 Audit API endpoints for authn 🏁
🚗 #26518 #28207 Remove environment variable/require login 👥
🚗 #24992 #28209 Clean up remote_debugging setting checks 👥
🚀 #8767 Run API requests as the authenticated user 📄
🚀 #25526 Anonymous-access version of web UI 📄
🚀 #25044 Single-sign on 📄
🚀 Fine-grained permissioning for web UI-specific data. 📄

Legend

Category Icon Description
Milestone
. 🛴 POC
. 🚲 MVP
. 🚗 Release
. 🚀 Future Work
Progress
. 📄 Not Started
. ✍️ In Progress
. 👥 In Review
. 🏁 Merged
. 🚷 Blocked
@couchand couchand added C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) meta-issue Contains a list of several other issues. A-webui-security labels May 15, 2018
@jordanlewis
Copy link
Member

We've had this for some time now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
A-webui-security C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) meta-issue Contains a list of several other issues.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jordanlewis @couchand