[
https://issues.apache.org/jira/browse/NIFI-6868?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16974586#comment-16974586
]
ASF subversion and git services commented on NIFI-6868:
-------------------------------------------------------
Commit ea31c1fcbb270031339f75b1d6ca4a157fdb7594 in nifi's branch
refs/heads/master from Mark Payne
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=ea31c1f ]
NIFI-6868: Ensure that when a property value is obtained by calling
ProcessContext.getPropertyValue(...).evaluateAttributeExpressions(...).getValue()
that we still retain the appropriate value even if the property references a
sensitive parameter
* Added additional unit tests and updated ParameterEvaluator to make sure that
it follows the same logic as the ParameterExpression in that sensitive
parameters cannot be access from within EL
This closes #3889
Signed-off-by: Rob Fellows <[email protected]>
> Sensitive parameters not evaluated properly when executing processor that
> references one.
> -----------------------------------------------------------------------------------------
>
> Key: NIFI-6868
> URL: https://issues.apache.org/jira/browse/NIFI-6868
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 1.10.0
> Reporter: Rob Fellows
> Assignee: Mark Payne
> Priority: Major
> Fix For: 1.11.0
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
> Configuring a processor with a sensitive property value set to reference a
> sensitive parameter does not evaluate properly.
>
> An easy way to reproduce this is to create a GetSFTP processor to use a
> sensitive parameter for the "password" property. You can use a publicly
> available SFTP server like:
>
> {{hostname: test.rebex.net}}
> {{password: password}}
>
> Connect this GetSFTP processor to an Add a LogMessage or some other processor
> and start the GetSFTP processor.
>
> When the password property is entered as a string of "password", it works.
> If you create a parameter in the parameter context, say password, and
> reference it as the property value, "#\{password}", you will see failures
> that it can not connect.
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
