Kinook Software Forum

Kinook Software Forum (https://www.kinook.com/Forum/index.php)
-   [VBP] General Discussion (https://www.kinook.com/Forum/forumdisplay.php?f=2)
-   -   Custom Validation and UI component states (https://www.kinook.com/Forum/showthread.php?t=154)

jason0816 07-16-2003 10:13 AM

Future User Action edit field features ...
 
Part of the work that we do works with a StarTeam server.
Which requires the user to type in a password.

Storing passwords in plain text and displaying them as plain text of course can pose a security breach.

If it's possible, it would be nice to see, at mimimum, the "password" property of edit boxes being provided via the XML format provided (i.e. Password="1" within the field tag)

Ideally such an item would also perform trivial encryption to prevent a casual user from recovering the password from a build file by mere visual inspection.

pjaquiery 07-16-2003 03:41 PM

You could use some script to decode encripted passwords at run time. Fixes the casual user problem, but doesn't provide very much security as the script can be run interactively by an interested user.

jason0816 07-16-2003 03:57 PM

Fair enough, however...
 
My work around for now is to clear out the password after the script is executed. The data entry is still blatantly visible.

My primary concern is that a priveldeged users password could be read as plain text from the UI after it's been entered or as it is being entered.

Since no build scripts will be published here that contain passwords and user names, it's more a matter of a malicious intern or digruntled employee that I'm trying to provide minimal/trivial protection against... (i.e. I don't expect that we will have a problem, but it's a safety net , albeit a weak one...)


All times are GMT -5. The time now is 03:44 AM.


Copyright © 1999-2023 Kinook Software, Inc.