You have been subscribed to a public bug:
On your database
1. load a module with password fields (like import_google)
2. Set information on user form like login and pass of google
3. If you have access to "set default", e.g as an admin, you potentially have
access to all the google accounts of your members.
I don't know if it's specifically the import_google or the webclient in
general that should be checked, but I think it's a security issue.
** Affects: openobject-server
Importance: Undecided
Status: New
** Tags: 6.1 google import profserv trunk webclient
--
password fields are visible thanks to "set default"
https://bugs.launchpad.net/bugs/1015092
You received this bug notification because you are a member of OpenERP Indian
Team, which is subscribed to OpenERP Server.
_______________________________________________
Mailing list: https://launchpad.net/~openerp-india
Post to : [email protected]
Unsubscribe : https://launchpad.net/~openerp-india
More help : https://help.launchpad.net/ListHelp
