mdsplus icon indicating copy to clipboard operation
mdsplus copied to clipboard

jScope defaults user to JAVA_USER with no way to override when connecting with `-s`

Open WhoBrokeTheBuild opened this issue 4 years ago • 1 comments

When using jScope with the command line option -s to connect to an mdsip server, the user defaults to JAVA_USER with no way (I can find) to override it.

I propose we make this default to the current username instead. Additionally, I think we should add a -u option to allow explicitly setting this (should your remote username be different than your local username)

WhoBrokeTheBuild avatar Jul 09 '21 18:07 WhoBrokeTheBuild

actually this bears a security issue. i assume you are refering to an mdsip.host restricted read access? you should not depend on the user name provided by mdsip. as it is easily faked. if you want to protect you data restrict access to ssh and localhost.

zack-vii avatar Aug 18 '21 11:08 zack-vii

You are right, but in the short term this should at least be whoami(), and in a future release we should insist on authenticated access.

WhoBrokeTheBuild avatar Mar 30 '23 19:03 WhoBrokeTheBuild