topic Re: Disabled Logs, but PW displayed in plain text in Product Forum

Disabled Logs, but PW displayed in plain text

GracieDevine — Mon, 25 Apr 2022 14:39:53 GMT

Hello,

I recently set up credentials manager, but the password is being displayed in plain text in the session log (PW is entered into web browser using a Write Stage).

For the action in the main process flow where the password is entered, Stage Logging is set to Errors Only and Don't log parameters is checked.

In the object the Start/End parameters have Stage Logging disabled, as well as the Write Stage that enters the password.

I found this discussion: Disable Logs - Sensitive Data
And this documentation on Logging Best Practices: Blue Prism Logging Best Practices Guide

Is there something else I could try? Or a step that I'm missing?

Re: Disabled Logs, but PW displayed in plain text

PvD_SE — Tue, 26 Apr 2022 05:05:49 GMT

Hi Gracie,

With the risk of stating the obvious: Surely all data items used for handling the password have been defined as data type 'Password' in your process?

Re: Disabled Logs, but PW displayed in plain text

GracieDevine — Tue, 26 Apr 2022 12:18:40 GMT

Hi Paul,

Yes, they have! Since posting this question we pushed the changes to Prod and in that environment at least, the Write PW stage does not appear in the log. Not sure why I'm still seeing the password in Dev when it's the same bot, OS, and version of BP.