[ 
https://issues.apache.org/jira/browse/USERGRID-672?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Johnson updated USERGRID-672:
-----------------------------------
    Description: 
After creating an app user their password is stored in clear-text in the 
portal.  It should not be persisted in the session or displayed in the portal 
in clear-text

IMPORTANT NOTE: the current version of the Portal that we use (at Apigee) is 
setup to enable the new Usergrid Central SSO, so if it is to be deployed before 
Central SSO is enabled in prod, then you will have to disable central SSO in 
the portal before deploying it.

  was:After creating an app user their password is stored in clear-text in the 
portal.  It should not be persisted in the session or displayed in the portal 
in clear-text


> Portal stores the password of an app user after it is created in clear-text
> ---------------------------------------------------------------------------
>
>                 Key: USERGRID-672
>                 URL: https://issues.apache.org/jira/browse/USERGRID-672
>             Project: Usergrid
>          Issue Type: Bug
>            Reporter: Jeffrey 
>            Assignee: ryan bridges
>
> After creating an app user their password is stored in clear-text in the 
> portal.  It should not be persisted in the session or displayed in the portal 
> in clear-text
> IMPORTANT NOTE: the current version of the Portal that we use (at Apigee) is 
> setup to enable the new Usergrid Central SSO, so if it is to be deployed 
> before Central SSO is enabled in prod, then you will have to disable central 
> SSO in the portal before deploying it.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to