Hi Erik,
What you’re after isn’t possible. Normally I’d tell you that your users need to generate tokens and pass them as the value of -Dsonar.login. However, it sounds like you have individual users randomly submitting analysis, which makes me question your setup. Ideally, you’re going to have a central CI system configured with the token of a minimum-permissions technical account, and that CI system is going to analyze automatically after each commit, so that random users never need to deal with this.
Let me know if this doesn’t make sense.
HTH,
Ann