[
https://issues.apache.org/jira/browse/DBCP-448?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14909333#comment-14909333
]
Phil Steitz commented on DBCP-448:
----------------------------------
I wonder if it might be best to have the underlying BasicDataSource getters
configurable to return null. That would require a little refactoring for
BasicManagedDataSource, but is doable.
> Disable password exposure via JMX.
> ----------------------------------
>
> Key: DBCP-448
> URL: https://issues.apache.org/jira/browse/DBCP-448
> Project: Commons Dbcp
> Issue Type: Improvement
> Affects Versions: 2.1
> Reporter: Michał Jedynak
> Priority: Minor
>
> Currently there is no control over which methods are exposed as mbeans via
> JMX in BasicDataSource.
> The main issue with this approach is that 'getPassword' method is also
> exposed which is most of the time problematic on production environments.
> It would be nice to have some control over the exposed methods to be able to
> disable password exposure.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
