[jbosstools-issues] [JBoss JIRA] (JBIDE-10490) do not store server passwords in plain text

Rob Stryker (Commented) (JIRA) jira-events at lists.jboss.org
Thu Dec 22 14:11:09 EST 2011


    [ https://issues.jboss.org/browse/JBIDE-10490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12652889#comment-12652889 ] 

Rob Stryker commented on JBIDE-10490:
-------------------------------------

The first page in a server editor is called the OverviewEditorPart. When this page is saved, no action is taken. The individual sections are not alerted to this save event.  A previous bug (or design flaw) years ago in WTP made it so additional pages (such as our deployment page) would not  be allerted on a doSave(etc) either, but I submitted a patch to wtp to fix that. Now, each page is alerted, but individual sections are not. 

This means that if we had a separate page for credentials, a page under our control (instead of OverviewEditorPart, which is directly instantiated), we might be able to take more custom action on a save event to ensure that secure storage is made use of. Currently, however, with credentials on the OverviewEditorPart, it is not possible without nearly destroying the codebase nad making it extremely fragile. 
                
> do not store server passwords in plain text
> -------------------------------------------
>
>                 Key: JBIDE-10490
>                 URL: https://issues.jboss.org/browse/JBIDE-10490
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: JBossAS/Servers
>            Reporter: Max Rydahl Andersen
>            Assignee: Rob Stryker
>            Priority: Blocker
>             Fix For: 3.3.0.Beta1
>
>
> last time we looked at this passwords were still being stored "unsafely"  - opening this to make sure we get that fixed by using eclipse's  secure storage apis

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jbosstools-issues mailing list