File Permissions being Overridden in Docker Deployment

[hreineck]

When using the OSCAL Editor in the all-in-one Docker environment, saving any changes causes the file permissions to change to -rw-r--r--, making it so that the user within Docker is the only user with write permissions.

Implementation Notes

I'm assuming that this is an issue with the "save" feature of the REST service itself, but it could very well be an issue with Docker configuration.

[laurelmay]

I think it's both -- So

oscal-rest-service/oscal-data-repository-file/src/main/java/com/easydynamics/oscal/data/repository/file/BaseOscalRepoFileImpl.java

Line 257 in 9be3770

Files.move(tempFile.toPath(), oscalFile.toPath(), StandardCopyOption.REPLACE_EXISTING);

is definitely a cause. We probably also want COPY_ATTRIBUTES and maybe even ATOMIC_MOVE.

But as far as the owning user changing, that's 100% expected behavior as far as I'm concerned. The container is running "rootless" (in a user namespace) and the user is a non-zero UID. So when that user performs a write operation, it should in fact perform the write as that user.