Re: [EXTERNAL] What is the best (and simple) way to implement security in a Phoebus solution?

["Kasemir, Kay via Tech-talk" <tech-talk@aps.anl.gov>]

> Is there any recomendable solution to implement username authentication 
> in Phoebus? I mean, some kind of solution to save critical information 
> (password hash?) that, then, it will be used to authenticate an user. 

Phoebus itself doesn't perform authentication. It depends on the full power of the operating system and simply accepts the current user as an authenticated user.
We do support authorization so you can for example enable/disable certain features in your code based on the current user, see online help https://control-system-studio.readthedocs.io/en/latest/authorization.html

There is also a SecureStore class based on the standard Java KeyStore that can be used to store name/value pairs, but it only offers weak protection when you use it with the default, code-generated password, see https://github.com/ControlSystemStudio/phoebus/blob/master/core/security/src/main/java/org/phoebus/security/store/SecureStore.java

-Kay