Follow us on LinkedIn Find us on YouTube
home recent topics recent posts search faq  

Devolutions inc. > Forum

user:
psw:
| register | lost password   open id
Messages in this topic - RSS

Home » Password Vault Manager - Beta » Bug: users can view credentials

Password Vault Manager beta topic
8/5/2011 8:29:31 AM

Paul Molensky
Paul Molensky
Posts: 36
Hi,

I've installed a trial of PVM. I noticed users are able to view and copy credentials (password). I don't seem to be able to disable this.

Regards, Paul

--
Regards, Paul Molensky
0 permalink
8/5/2011 9:18:19 AM

David Hervieux
David Hervieux
Administrator
Posts: 4241
What type data source do you use, a local or a SQL Server data source?

--
David Hervieux
Devolutions inc.


0 permalink
8/5/2011 11:08:05 AM

Paul Molensky
Paul Molensky
Posts: 36
Hi David, I use a MS SQL Server data source.

--
Regards, Paul Molensky
0 permalink
8/5/2011 11:24:45 AM

David Hervieux
David Hervieux
Administrator
Posts: 4241
Ok,
You want your user to see the data entry, except the password? Why not hide the entry completely?

--
David Hervieux
Devolutions inc.


0 permalink
8/5/2011 1:32:26 PM

Paul Molensky
Paul Molensky
Posts: 36
For RDMsessions you can set at user admin if they're allowed to see session details, if not, than also no credential details?
edited by molensky on 8/5/2011

--
Regards, Paul Molensky
0 permalink
8/7/2011 4:49:37 PM

David Hervieux
David Hervieux
Administrator
Posts: 4241
Hi,
For you what are the credential details, only the password?

--
David Hervieux
Devolutions inc.


0 permalink
8/8/2011 2:51:53 AM

Paul Molensky
Paul Molensky
Posts: 36
Hi David,

at least the account-details: username, domain & password

I'm rethinking the function of PVM, to share sensitive data with others. So hiding the info is counter productive. But as a credential repository, the account info is not relevant to know/see as long as it can be used.

So maybe the following is a suggestion:
- include a checkbox on the account-tab: "show details only to administrators/editors" which refer to the security-group set for the entry. Other users have the details/info hidden.

Or make it more general (I have no current use-case for it, but someone else might):
- include the security group on the different data-tabs (account, Alarm codes, Bank, CC & other). And show or hide the entry detail/info depending on the security settings.

Hope this helps :-) Thanks for you time and effort.


Regars, Paul

--
Regards, Paul Molensky
0 permalink
8/8/2011 4:54:05 AM

David Hervieux
David Hervieux
Administrator
Posts: 4241
Hi,
excellent suggestion, I will consider it

--
David Hervieux
Devolutions inc.


0 permalink

Home » Password Vault Manager - Beta » Bug: users can view credentials





Powered by Jitbit Forum 7.0.4.0 © 2006-2011 Jitbit Software