In export config are all password readable !

pupik · December 21, 2005, 10:09am

Users, that login as remote to dude server ONLY READ, can export dude configuration…
All password in XML file is readable !! Why ?!!

lastguru · December 21, 2005, 10:58am

will be fixed (read-only users will not be able to export-import config)

rpingar · January 4, 2006, 8:59pm

I dont see this problem in 2.9.10 using export file=tets

To what release did write about?

Thanks
Ros

ofca · January 27, 2006, 9:12am

While you’re at it, mostly everywhere passwords are visible, if not clear-text then via view source from web browser, or via directed api write to dude window, to delete password character value (you know, all the programs that you target the edit box and it reveals what’s hidden beneath X’s or *'s). More security modes would be nice too, so we could for example create users that could only view what’s currently down, and nothing more.