Project

General

Profile

Actions

Feature #15196

open

Hidden global parameters should not be visible when click YAML button on host

Added by Göran Törnqvist almost 8 years ago. Updated about 6 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
External Nodes
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

If an admin stores a sensitive password in a global parameter or hostgroup parameter it should not be possible for a user with only view_hosts permissions to view the password simply by clicking the YAML button on the host.

Masking the value in the YAML output with ** when the ENC script is called from the web gui should be the best solution.


Related issues 1 (1 open0 closed)

Related to Foreman - Tracker #4470: Usability of parameters and overridesNew

Actions
Actions #1

Updated by Tomer Brisker almost 8 years ago

  • Related to Tracker #4470: Usability of parameters and overrides added
Actions #2

Updated by Tomer Brisker about 6 years ago

  • Difficulty deleted (trivial)
Actions

Also available in: Atom PDF