Please use env vars instead of cmd line parameters for credentials

[frankie]

Note that username and password are visible to all users by using simple commands which list running processes. That is not a good thing o do, it would be better using a pair of environment variables instead.

[neteler]

Please indicate to which processes you refer to, thanks (ideally, also add as keyword(s)).

[frankie]

Ops, sorry I missed the module, which is an addon: r.in.srtm.region (and eventually r.in.srtm when updated for use of credentials).

[marisn]

It's not that easy. Setting env variables for Windows users is not so common as for *nix'ers. IMHO a correct solution would be to accept both – env variables and command line parameters + add an explanation in documentation. Thus on typical single user Windows boxes nothing would change, but multiuser *nix users will be able to not expose their credentials by using env vars.

[neteler]

Suggestion: The best way might be to use a password file. A standard approach for this is used by e.g. i.modis:

See "netrc" related code here:

​https://trac.osgeo.org/grass/browser/grass-addons/grass7/imagery/i.modis/i.modis.download/i.modis.download.py#L193

Note: Credentials are obtained from such a .netrc file also by wget, ftp and other software.

[martinl]

Remove Milestone from Addons bugreports.