[
https://issues.apache.org/jira/browse/MCHANGES-395?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16610177#comment-16610177
]
Stefan Wendelmann commented on MCHANGES-395:
--------------------------------------------
Replace MY... with the original Values
pom.xml
{code:xml}
...
<issueManagement>
<system>JIRA</system>
<url>https://jira.myserver.de/browse/MYPROJECT</url>
</issueManagement>
...
<plugins>
...
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-changes-plugin</artifactId>
<version>2.12.1</version>
<executions>
<execution>
<id>generate-issue-report</id>
<phase>generate-resources</phase>
<goals>
<goal>jira-report</goal>
</goals>
</execution>
</executions>
<configuration>
<issueManagementSystems>
<issueManagementSystem>JIRA</issueManagementSystem>
</issueManagementSystems>
<useJql>true</useJql>
<onlyCurrentVersion>false</onlyCurrentVersion>
<resolutionIds>Fertig,Gelöst</resolutionIds>
<statusIds>Fertig</statusIds>
<columnNames>Type,Key,Summary,Priority,Status,Resolution,Fix
Version,Assignee</columnNames>
<!--<jiraUser>${jira.user}</jiraUser>-->
<!--<jiraPassword>${jira.pw}</jiraPassword>-->
<webPassword>${jira.pw}</webPassword>
<webUser>${jira.user}</webUser>
</configuration>
</plugin>
...
</plugins>
{code}
settings.xml
{code:xml}
...
<profiles>
<profile>
<id>my-env</id>
<activation>
<activeByDefault>true</activeByDefault>
</activation>
<properties>
<jira.user>MYUSER</jira.user>
<jira.pw>{MYENCRYPTEDPW}</jira.pw>
</properties>
</profile>
</profiles>
{code}
> JIRA password security
> ----------------------
>
> Key: MCHANGES-395
> URL: https://issues.apache.org/jira/browse/MCHANGES-395
> Project: Maven Changes Plugin
> Issue Type: Improvement
> Components: jira
> Affects Versions: 2.12.1
> Reporter: Stefan Wendelmann
> Priority: Major
>
> May it be possible to encrypt the Jira password or to ask for it from the
> console?
>
> AFAIK a there is no option in Jira to create a "special" User out of the
> licence for REST Calls so we have to use a real persons Account with his/her
> original password.
> And is the pom.xml with password saved into the jar in META-INF ? So anyone
> with winrar i.e. can read your Jira password in plaintext ?
>
> thanks in advance!
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
