<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.jboss.org">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="https://static.jboss.org/developer/gravatar/b5aecbb09157358eeabba1c8ddd3a86a?d=mm&s=48" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="darahayes" id="email_darahayes" href="https://issues.jboss.org/secure/ViewProfile.jspa?name=darahayes" style="color:#3b73af;; color: #3b73af; text-decoration: none">Dara Hayes</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.jboss.org/browse/AEROGEAR" style="color: #3b73af; text-decoration: none">AeroGear</a> / <a href="https://issues.jboss.org/browse/AEROGEAR-2217" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-89dd1494-52bd-4588-96ff-a83ab9815192" height="16" width="16" border="0" align="absmiddle" alt="Task" style="vertical-align: text-bottom"></a> <a href="https://issues.jboss.org/browse/AEROGEAR-2217" style="color: #3b73af; text-decoration: none">AEROGEAR-2217</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.jboss.org/browse/AEROGEAR-2217" style="color: #3b73af; text-decoration: none">Investigation: Ensure we are Following Security Best Practices with the aerogear-app-metrics Postgres Database </a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-89dd1494-52bd-4588-96ff-a83ab9815192" height="16" width="16" border="0" align="absmiddle" alt="Task" style="vertical-align: text-bottom"> Task </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Unassigned </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 28/Feb/18 9:12 AM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Labels:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> team-service-2 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-49b79bdf-11f9-40d9-917a-2b7ef6d96e81" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom"> Major </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="darahayes" id="email_darahayes" href="https://issues.jboss.org/secure/ViewProfile.jspa?name=darahayes" style="color:#3b73af;; color: #3b73af; text-decoration: none">Dara Hayes</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">As part of the <a href="https://github.com/aerogearcatalog/metrics-apb/pull/28#pullrequestreview-98892041" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">initial PR to the metrics-apb</a> that also provisions the aerogear-app-metrics service, a point was raised around best practices when it comes to the management of the Postgres Database.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The best practice would be to follow the principle of least privilege and create a locked down user with the appropriate CRUD privileges for the application database. Here's an example <a href="https://dba.stackexchange.com/questions/33943/granting-access-to-all-tables-for-a-user/33960#33960" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">stackexchange</a> answer.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Right now it's not fully clear whether or not we are following best practices.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Currently the Postgres container is defined as follows:</p> <p style="margin: 10px 0 0 0"></p>
<div id="syntaxplugin" class="syntaxplugin" style="border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;">
<table cellspacing="0" cellpadding="0" border="0" width="100%" style="font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; margin-top: 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;">- name: postgresql</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> image: "{{ postgres_image }}:{{ postgres_version }}"</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> imagePullPolicy: IfNotPresent</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> ports:</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> - container_port: "{{ postgres_port }}"</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> env:</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> - name: POSTGRESQL_PASSWORD</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> value: "{{ postgres_password }}"</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> - name: POSTGRESQL_USER</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> value: "{{ postgres_user }}"</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> - name: POSTGRESQL_DATABASE</span></pre> </td>
</tr>
<tr id="syntaxplugin_code_and_gutter">
<td style=" line-height: 1.4em !important; padding: 0em; vertical-align: top;; padding: 0px; border-collapse: collapse"> <pre style="font-size: 1em; margin: 0 10px; margin-bottom: 10px; width: auto; padding: 0;; margin: 10px 0 0 0; margin-top: 0"><span style="color: black; font-family: 'Consolas', 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important;"> value: aerogear_mobile_metrics
</span></pre> </td>
</tr>
</tbody>
</table>
</div> <p style="margin: 10px 0 0 0"></p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The same POSTGRESQL_USER credentials are supplied into the metrics service application. We need to determine if that user is in fact a super user or if they are a standard user with a subset of privileges.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The best practice would be to do something similar to these steps:</p>
<ul>
<li>Start the Postgres service</li>
<li>log into the Postgres server using the admin user.</li>
<li>Create a new user e.g. app_user to be used by the app metrics service</li>
<li>Create a new database aerogear_mobile_metrics</li>
<li>Grant SELECT, INSERT, UPDATE, DELETE privileges on the public schema to app_user</li>
<li>Grant CONNECT privileges on aerogear_mobile_metrics to app_user</li>
<li>Then the app-metrics service would be passed the app_user credentials when it's started.</li>
</ul> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">This may or may not be necessary depending on whether the POSTGRESQL_USER is a super user or a standard user.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">According to some preliminary research by <a href="https://issues.jboss.org/secure/ViewProfile.jspa?name=steventobin" class="user-hover" rel="steventobin" style="color: #3b73af; text-decoration: none">Steven Tobin</a>, it seems the 'user' user we create can only affect the metrics db and isn't a full admin.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The user that is created called user seems to have no rights to anything. Postgres is the default admin and since we dont set an admin password admin only allows local connections.</p>
<div class="table-wrap">
<table class="confluenceTable" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-collapse: collapse; margin: 5px 0 5px 2px; width: auto">
<tbody>
<tr>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif">Role name</th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif"> Attributes </th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif">Member of</th>
</tr>
<tr>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif">postgres </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> Superuser, Create role, Create DB, Replication, Bypass RLS </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> {}</td>
</tr>
<tr>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif">user </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> {}</td>
</tr>
</tbody>
</table>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The 'user' user we create owns the aerogear_mobile_metrics database but nothing else</p>
<div class="table-wrap">
<table class="confluenceTable" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-collapse: collapse; margin: 5px 0 5px 2px; width: auto">
<tbody>
<tr>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif">Name </th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif"> Owner </th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif"> Encoding </th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif"> Collate </th>
<th class="confluenceTh" style="border: 1px solid #cccccc; background: #f5f5f5; padding: 3px 4px 3px 4px; text-align: center; font: bold 14px/20px Arial, sans-serif"> Ctype </th>
</tr>
<tr>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif">aerogear_mobile_metrics </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> user </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> UTF8 </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> en_US.utf8 </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> en_US.utf8 </td>
</tr>
<tr>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif">postgres </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> postgres </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> UTF8 </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> en_US.utf8 </td>
<td class="confluenceTd" style="padding: 0px; border-collapse: collapse; border: 1px solid #cccccc; padding: 3px 4px 3px 4px; font: normal 14px/20px Arial, sans-serif"> en_US.utf8 </td>
</tr>
</tbody>
</table>
</div> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The goal of this task is to investigate on a low level if there are any potential security issues with the credentials supplied to the application and to identify what changes (if any) would be needed in the metrics-apb and in the aerogear-app-metrics service to fix these issues.</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.jboss.org/browse/AEROGEAR-2217#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-1d07d574-e57a-40a9-99ce-56f8621bc134" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.jboss.org/browse/AEROGEAR-2217#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.5.0#75005-<span title="fd8c849d4e278dd8bbaccc61e707a716ad697024" data-commit-id="fd8c849d4e278dd8bbaccc61e707a716ad697024}">sha1:fd8c849</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-5c5f178d-f6e8-424b-be06-66eaa1076ad2" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>