{"action":"closed","issue":{"url":"https://api.github.com/repos/blossom-project/blossom/issues/179","repository_url":"https://api.github.com/repos/blossom-project/blossom","labels_url":"https://api.github.com/repos/blossom-project/blossom/issues/179/labels{/name}","comments_url":"https://api.github.com/repos/blossom-project/blossom/issues/179/comments","events_url":"https://api.github.com/repos/blossom-project/blossom/issues/179/events","html_url":"https://github.com/blossom-project/blossom/issues/179","id":343595300,"node_id":"MDU6SXNzdWUzNDM1OTUzMDA=","number":179,"title":"System account: better default","user":{"login":"RLejolivet","id":9880933,"node_id":"MDQ6VXNlcjk4ODA5MzM=","avatar_url":"https://avatars3.githubusercontent.com/u/9880933?v=4","gravatar_id":"","url":"https://api.github.com/users/RLejolivet","html_url":"https://github.com/RLejolivet","followers_url":"https://api.github.com/users/RLejolivet/followers","following_url":"https://api.github.com/users/RLejolivet/following{/other_user}","gists_url":"https://api.github.com/users/RLejolivet/gists{/gist_id}","starred_url":"https://api.github.com/users/RLejolivet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RLejolivet/subscriptions","organizations_url":"https://api.github.com/users/RLejolivet/orgs","repos_url":"https://api.github.com/users/RLejolivet/repos","events_url":"https://api.github.com/users/RLejolivet/events{/privacy}","received_events_url":"https://api.github.com/users/RLejolivet/received_events","type":"User","site_admin":false},"labels":[{"id":357397581,"node_id":"MDU6TGFiZWwzNTczOTc1ODE=","url":"https://api.github.com/repos/blossom-project/blossom/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-07-23T11:34:15Z","updated_at":"2018-08-24T13:57:44Z","closed_at":"2018-08-24T13:57:44Z","author_association":"MEMBER","body":"The current default is to have a system account with a fixed password, which means that if a project goes live leaving inadvertently the defaults, anyone would be able to easily access the back-office and its advanced functionalities (through Actuator).\r\n\r\nWe should tweak it so that defaults would be good enough even for live apps:\r\n- System password generated at boot and shown in logs, like what's default for spring security.\r\n- Disable system account automatically when at least one account with enough rights to administer roles exists"}}
{"actor":{"display_login":"RLejolivet"}}