Opened 8 years ago

Closed 7 years ago

#1787 closed enhancement (fixed)

Protect sensitive data from being loaded by the Metadata class

Reported by: Nicklas Nordborg Owned by: everyone
Priority: major Milestone: BASE 3.3
Component: core Version:
Keywords: Cc:

Description

The Metadata class can be used to load data from the database using reflection on the data layer objects. However, in #1784 it was discovered that some properties may contain sensitive data that has higher protection than other data (eg. change history logs). A solution was implemented as part of that ticket (see [6355]). The same protection should be applied to some other properties:

  • Passwords (they are encrypted, but usually not readable by anyone)
  • Internal file name (is for internal use only)

Change History (3)

comment:1 Changed 8 years ago by Nicklas Nordborg

Resolution: fixed
Status: newclosed

(In [6356]) Fixes #1787: Protect sensitive data from being loaded by the Metadata class

comment:2 Changed 7 years ago by Nicklas Nordborg

Resolution: fixed
Status: closedreopened

There is also some information in the FileServerData class that need protection:

  • Password
  • Client certificate
  • Client certificate password

comment:3 Changed 7 years ago by Nicklas Nordborg

Resolution: fixed
Status: reopenedclosed

(In [6486]) Fixes #1787: Protect sensitive data from being loaded by the Metadata class

Note: See TracTickets for help on using tickets.