Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: None
    • Labels:

      Description

      Remove users from Appstore DB(appsDB.json). Currently, we have two users charan and valla.

      While creating new appsDB.json make sure that there are no users in the database. (It can compromise security)

      Test Steps:
      1. Go to the admin section.
      2. Go to the User table.
      3. Make sure you have zero users.
      4. Test the same in testappstore.bioviz.org

        Attachments

          Activity

          svallapu Sai Charan Reddy Vallapureddy (Inactive) created issue -
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Field Original Value New Value
          Epic Link IGBF-1388 [ 17463 ]
          Hide
          ann.loraine Ann Loraine added a comment - - edited

          Question:

          • If we continue to include Apps in the JSON file that we are using to stand up development App Store instances, will we need to also continue including users in the JSON as well? I think there may be users associated with Apps. If yes, we might need to include some "dummy" ( ? ) users in the JSON.
          Show
          ann.loraine Ann Loraine added a comment - - edited Question: If we continue to include Apps in the JSON file that we are using to stand up development App Store instances, will we need to also continue including users in the JSON as well? I think there may be users associated with Apps. If yes, we might need to include some "dummy" ( ? ) users in the JSON.
          Hide
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment -

          [~aloraine]

          Yes, users are associated with the apps.

          It is better to remove all the admin users we created for development purposes before it goes live.

          Now, testappstore.bioviz.org has my personal admin user credentials. These admin credentials are imported from appsDB.json. (Whenever we create a user with manage.py, this user will be added in the users table)

          This ticket main purpose it to remove my admin credentials from DB and create a new appsDB.json file. It is best practice to have just one main Admin user for testappstore.

          Show
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment - [~aloraine] Yes, users are associated with the apps. It is better to remove all the admin users we created for development purposes before it goes live. Now, testappstore.bioviz.org has my personal admin user credentials. These admin credentials are imported from appsDB.json. (Whenever we create a user with manage.py, this user will be added in the users table) This ticket main purpose it to remove my admin credentials from DB and create a new appsDB.json file. It is best practice to have just one main Admin user for testappstore.
          Hide
          ann.loraine Ann Loraine added a comment -

          Yes, I think I noticed that. The your user (which has "admin" privs) is also the same user associated with all the apps.

          Show
          ann.loraine Ann Loraine added a comment - Yes, I think I noticed that. The your user (which has "admin" privs) is also the same user associated with all the apps.
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Assignee Sai Charan Reddy Vallapureddy [ svallapu ]
          Hide
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment -

          Branch: https://bitbucket.org/svallapu/appstore/branch/IGBF-1844#diff

          Removed my personal admin user credentials from the database.

          Show
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment - Branch: https://bitbucket.org/svallapu/appstore/branch/IGBF-1844#diff Removed my personal admin user credentials from the database.
          Hide
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment -

          Pull Request submitted

          Show
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment - Pull Request submitted
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Status In Progress [ 3 ] Pull Request Submitted [ 10101 ]
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Assignee Sai Charan Reddy Vallapureddy [ svallapu ]
          ann.loraine Ann Loraine made changes -
          Status Pull Request Submitted [ 10101 ] Needs Testing [ 10002 ]
          Hide
          ann.loraine Ann Loraine added a comment -

          Merged to master. Needs to be deployed on testappstore (locally?) for testing.
          I am not sure how to engineer making a change to the RDS database on the test appstore however.
          Should we drop the database and re-build it?

          Show
          ann.loraine Ann Loraine added a comment - Merged to master. Needs to be deployed on testappstore (locally?) for testing. I am not sure how to engineer making a change to the RDS database on the test appstore however. Should we drop the database and re-build it?
          ann.loraine Ann Loraine made changes -
          Status Needs Testing [ 10002 ] Needs Testing [ 10002 ]
          svallapu Sai Charan Reddy Vallapureddy (Inactive) made changes -
          Comment [ Since there are no changes to the skeleton of the database, I think it would be sufficient to just execute the below command.

          python manage.py loaddata appsDB.json ]
          Hide
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment - - edited

          [~aloraine]

          We can update the database with Django loaddata. I think we dont have to drop the database(database skeleton is not changed)

          command: python manage.py loaddata appsDB.json

          Show
          svallapu Sai Charan Reddy Vallapureddy (Inactive) added a comment - - edited [~aloraine] We can update the database with Django loaddata. I think we dont have to drop the database(database skeleton is not changed) command: python manage.py loaddata appsDB.json
          ann.loraine Ann Loraine made changes -
          Sprint Summer 2019 Sprint 9 [ 68 ] Summer 2019 Sprint 9, Summer 2019 Sprint 10 [ 68, 69 ]
          ann.loraine Ann Loraine made changes -
          Rank Ranked higher
          noor91zahara Noor Zahara (Inactive) made changes -
          Assignee Noor Zahara [ noor91zahara ]
          noor91zahara Noor Zahara (Inactive) made changes -
          Status Needs Testing [ 10002 ] Testing In Progress [ 10003 ]
          Hide
          noor91zahara Noor Zahara (Inactive) added a comment -

          The users have been removed.
          Working as expected

          Show
          noor91zahara Noor Zahara (Inactive) added a comment - The users have been removed. Working as expected
          noor91zahara Noor Zahara (Inactive) made changes -
          Resolution Done [ 10000 ]
          Status Testing In Progress [ 10003 ] Closed [ 6 ]
          noor91zahara Noor Zahara (Inactive) made changes -
          Assignee Noor Zahara [ noor91zahara ] Sai Charan Reddy Vallapureddy [ svallapu ]
          ann.loraine Ann Loraine made changes -
          Workflow Loraine Lab Workflow [ 18566 ] Fall 2019 Workflow Update [ 20249 ]
          ann.loraine Ann Loraine made changes -
          Workflow Fall 2019 Workflow Update [ 20249 ] Revised Fall 2019 Workflow Update [ 22390 ]

            People

            • Assignee:
              svallapu Sai Charan Reddy Vallapureddy (Inactive)
              Reporter:
              svallapu Sai Charan Reddy Vallapureddy (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: