[
http://jira.codehaus.org/browse/CONTINUUM-1605?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Brett Porter updated CONTINUUM-1605:
------------------------------------
Fix Version/s: 1.2
> Continuum should not store the userid or password if 'use cached credentials'
> is checked
> ----------------------------------------------------------------------------------------
>
> Key: CONTINUUM-1605
> URL: http://jira.codehaus.org/browse/CONTINUUM-1605
> Project: Continuum
> Issue Type: Improvement
> Components: Database, SCM
> Affects Versions: 1.1
> Reporter: Wendy Smoak
> Fix For: 1.2
>
>
> Continuum is storing scm passwords in the database in plain text.
> If the 'use cached credentials' checkbox is checked, it should use the
> provided userid and password for the initial pom retrieval, and then discard
> them.
> (Continuum has the ability to use svn credentials that have been pre-cached
> on the build server, but when you add a project the first request for the pom
> is not a svn checkout, it's just an http/https GET.)
> Workaround: periodically remove the credentials from the database:
> update PROJECT set SCM_PASSWORD = "";
> update PROJECT set SCM_USERNAME = "";
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
