Document that each user should have separate namespace #18
Labels
bug
Something isn't working
dev-docs
priority-low
Legit issue but cosmetic or nice-to-have
severity-low
Bug that makes the usage of the Zowe less convenient but doesn't impact key use cases
In addition, I also noticed that the credentials are stored under a single secret on Google Cloud, and I presume this will also be the case in a local environment. Since the credentials are stored in a way where the Zowe config path is the "key" for the object, @zFernand0 and I quickly discussed a scenario where he could potentially replace my credentials in the secret object:
ZOWE_CLI_HOME
environment variable to fall under this path (e.g. if my config is/a/b/c/zowe.config.json
,ZOWE_CLI_HOME
would be/a/b/c
).Could we potentially avoid this by generating a unique hash on the user's end, and then chaining that with the file path to make a unique key? Or, could we generate a unique hash and simply use that as the key?
With either proposal, we would have to store the hash/identifier somewhere (such as in the Zowe config itself), but this would prevent someone from intentionally overwriting other user's credentials in the same cluster.
Originally posted by @traeok in zowe/zowe-explorer-vscode#2230 (review)
The text was updated successfully, but these errors were encountered: