如何向最终用户隐藏声纳数据库凭据 [英] How do I hide Sonar database credentials from end users
问题描述
尝试向 user@sonar.codehaus.org 询问此问题，但尽管已订阅，但我的电子邮件地址似乎不允许发送到该列表.
Attempted to ask this to user@sonar.codehaus.org but my email address appears to not be allowed to send to that list despite being subscribed.
我正试图弄清楚如何整合一个集中的、托管的 SonarQube 服务，该服务将允许任何开发人员向该服务提交结果.
I'm trying to figure out how to put together a centralised, managed SonarQube service which would allow any developer to submit results to the service.
用于设置 SonarQube 的所有文档似乎都指出，想要提交结果的用户应使用以下内容填充其配置:
All of the documentation for setting up SonarQube appears to state that users wanting to submit results should populate their configuration with something like the following:
<properties>
<!-- ... snipped ... -->
<sonar.jdbc.username>sonar</sonar.jdbc.username>
<sonar.jdbc.password>sonar</sonar.jdbc.password>
<sonar.host.url>http://sonar-host:9000</sonar.host.url>
<!-- ... snipped ... -->
</properties>
例如:
- http://docs.codehaus.org/display/SONAR/安装+配置+Maven
- http://docs.codehaus.org/display/SONAR/安装+和+配置+SonarQube+Runner
这意味着任何想要更新统计信息的用户都可以访问主 SonarQube 数据库的用户名/密码，并拥有查询/更新该数据库的完全权限.
This would mean that any user wanting to update statistics would have access to a username/password for the main SonarQube database with full permission to query/update that database.
SonarQube 的意图是作为集中式服务运行，构建管理员获取代码库并代表开发团队构建这些服务，还是有办法将此功能直接委托给团队?
Is the intention that SonarQube should be run as a centralised service which build administrators take code bases and build these on behalf of development teams or is there a way in which this function could be delegated to the teams directly?
干杯，
大卫.
推荐答案
您可以设置 设置加密 对要分发的设置进行加密.请注意，大多数情况下，RDBM 登录名和密码仅在负责分析的机器上知道，这通常是一个持续集成系统.
You can setup Settings Encryption to encrypt settings if they are meant to be distributed. Note that most of the times, the RDBM login and password are only known on the machine responsible for analysis, which is often a continuous integration system.
这篇关于如何向最终用户隐藏声纳数据库凭据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
