Skip to content
This repository has been archived by the owner on Feb 28, 2022. It is now read-only.

Add authentication for write actions #26

Open
iangudger opened this issue Mar 15, 2016 · 2 comments
Open

Add authentication for write actions #26

iangudger opened this issue Mar 15, 2016 · 2 comments

Comments

@iangudger
Copy link
Member

If your data isn't sensitive, it is fine to let anyone read it without authentication. You shouldn't let just anyone modify just anything though.

@aadabi
Copy link
Member

aadabi commented Mar 31, 2016

Data as a whole is gold we don't want bots to request and suck our data. we have to figure out a way eventually that the data is only provided to the authenticated users only.

@iangudger
Copy link
Member Author

I don't think preventing read-access to our data is necessary at this point. The interesting part is what we do with it, and all of that is already open-source. What we don't want is to allow arbitrary people to change our data without our permission (or knowledge). Our current system doesn't even leave an audit trail to find out what was modified, by who and when. Unauthenticated write access has the potential to jeopardize the correctness and credibility of any findings.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants