REVIEW-65: XCI-419 Gateway attribute submission improvements for 2018 - Design/Security Review

General design and security risk review for a set of improvements to the gateway_submit_attributes tool.

The reviewers noted one concern about the APIKeys in a sqlite database will be backed up. After further consideration with XDCDB group this design choice was altered and agreed upon to store this information in the XDCDB database, which is already well managed and backed up.  Other consideration was to identify an automated method to securely issue APIKeys to the Gateways, after discussion and review of choices, XSEDE's Kerberos  authentication will be used to validate users to issue APIKeys. Finally, a usage attribute was deemed necessary for inclusion to support Jetstream which does not provide granular usage like batch systems.

XCI-419_Gateway Attribute Submission Improvements_v1.3.pdf

XCI-419_Gateway Attribute Submission Improvements_v1.1.pdf

Please focus on these questions:

1. Does the proposed design provide the required functionality
2. Does the proposed design follow XSEDE security guidelines and best practices
3. Does the proposed design mitigate significant security risks
4. Could the proposed design be improved