[ 
https://issues.apache.org/jira/browse/USERGRID-672?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14580758#comment-14580758
 ] 

ASF GitHub Bot commented on USERGRID-672:
-----------------------------------------

Github user asfgit closed the pull request at:

    https://github.com/apache/incubator-usergrid/pull/253


> Portal stores the password of an app user after it is created in clear-text
> ---------------------------------------------------------------------------
>
>                 Key: USERGRID-672
>                 URL: https://issues.apache.org/jira/browse/USERGRID-672
>             Project: Usergrid
>          Issue Type: Bug
>            Reporter: Jeffrey 
>            Assignee: ryan bridges
>             Fix For: 1.0.2
>
>
> After creating an app user their password is stored in clear-text in the 
> portal.  It should not be persisted in the session or displayed in the portal 
> in clear-text
> IMPORTANT NOTE: the current version of the Portal that we use (at Apigee) is 
> setup to enable the new Usergrid Central SSO, so if it is to be deployed 
> before Central SSO is enabled in prod, then you will have to disable central 
> SSO in the portal before deploying it.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to