Actions
Feature #15196
open
Hidden global parameters should not be visible when click YAML button on host
Status:
New
Priority:
Normal
Assignee:
-
Category:
External Nodes
Target version:
-
Description
If an admin stores a sensitive password in a global parameter or hostgroup parameter it should not be possible for a user with only view_hosts permissions to view the password simply by clicking the YAML button on the host.
Masking the value in the YAML output with ** when the ENC script is called from the web gui should be the best solution.
Updated by
Actions