cylc-uiserver icon indicating copy to clipboard operation
cylc-uiserver copied to clipboard

Check permission level on the user config files

Open datamel opened this issue 3 years ago • 1 comments

Follows on from https://github.com/cylc/cylc-uiserver/pull/204

As mentioned in the authorization proposal, for security reasons, the user config.py file, which is located in ~/.cylc/hub/config.py, should not be writable by anyone other than the user (otherwise the authorization settings could be manipulated). A check should be made to ensure permissions for group and others are not writable and if not an error should be raised.

datamel avatar Jul 16 '21 18:07 datamel