- Description has changed:

Diff:

~~~~

--- old
+++ new
@@ -8,4 +8,6 @@
 
 And check for further collections that should be dropped too.  Also consider 
our internal SF collections and if any need to be scrubbed as well.
 
+The user collection should scrub all fields that aren't explicitly allowed 
(possible in a mongo query? perhaps copy partial docs to a new collection and 
rename).   Specific examples we're currently missing: password field, and 
tool_data (for github import tokens).
+
 Afterwards, https://trac.geek.net/trac/siteops/ticket/51121 can be unblocked

~~~~




---

** [tickets:#4769] Better data scrubbing**

**Status:** open
**Created:** Wed Aug 22, 2012 09:22 PM UTC by Dave Brondsema
**Last Updated:** Fri Nov 02, 2012 04:45 PM UTC
**Owner:** nobody

`scripts/scrub-allura-data.py` does not remove all sensitive data.  We should 
drop these collections:

* api_*
* monq_task
* oauth_*
* oid_*
* openid 

And check for further collections that should be dropped too.  Also consider 
our internal SF collections and if any need to be scrubbed as well.

The user collection should scrub all fields that aren't explicitly allowed 
(possible in a mongo query? perhaps copy partial docs to a new collection and 
rename).   Specific examples we're currently missing: password field, and 
tool_data (for github import tokens).

Afterwards, https://trac.geek.net/trac/siteops/ticket/51121 can be unblocked


---

Sent from sourceforge.net because allura-dev@incubator.apache.org is subscribed 
to https://sourceforge.net/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://sourceforge.net/p/allura/admin/tickets/options.  Or, if this is a 
mailing list, you can unsubscribe from the mailing list.

Reply via email to