Skip to content

GridOpticsServer discards configured manager credential (:221-224), hardcoded system/manager always used (:447) #42

Description

@craigpnnl

Pre-existing defect found during the security review of the primary fix (not introduced by it). GridOpticsServer.java:221-224 compute the configured manager user/password via getProperty(...) but discard the return values, so the literal system/manager at line 447 is always used regardless of config. The broker system credential is therefore not actually configurable. Confirm intended behavior before changing.

Workspace card: GADP-014. Related: GRIDAPPSD/GOSS-GridAPPS-D#1882.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions