Disabled Logs, but PW displayed in plain text
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
25-04-22 03:39 PM
Hello,
I recently set up credentials manager, but the password is being displayed in plain text in the session log (PW is entered into web browser using a Write Stage).
For the action in the main process flow where the password is entered, Stage Logging is set to Errors Only and Don't log parameters is checked.
In the object the Start/End parameters have Stage Logging disabled, as well as the Write Stage that enters the password.
I found this discussion: Disable Logs - Sensitive Data
And this documentation on Logging Best Practices: Blue Prism Logging Best Practices Guide
Is there something else I could try? Or a step that I'm missing?
I recently set up credentials manager, but the password is being displayed in plain text in the session log (PW is entered into web browser using a Write Stage).
For the action in the main process flow where the password is entered, Stage Logging is set to Errors Only and Don't log parameters is checked.
In the object the Start/End parameters have Stage Logging disabled, as well as the Write Stage that enters the password.
I found this discussion: Disable Logs - Sensitive Data
And this documentation on Logging Best Practices: Blue Prism Logging Best Practices Guide
Is there something else I could try? Or a step that I'm missing?
2 REPLIES 2
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
26-04-22 06:05 AM
Hi Gracie,
With the risk of stating the obvious: Surely all data items used for handling the password have been defined as data type 'Password' in your process?
Happy coding!
Paul, Sweden
(By all means, do not mark this as the best answer!)
Paul, Sweden
(By all means, do not mark this as the best answer!)
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
26-04-22 01:18 PM
Hi Paul,
Yes, they have! Since posting this question we pushed the changes to Prod and in that environment at least, the Write PW stage does not appear in the log. Not sure why I'm still seeing the password in Dev when it's the same bot, OS, and version of BP.
Yes, they have! Since posting this question we pushed the changes to Prod and in that environment at least, the Write PW stage does not appear in the log. Not sure why I'm still seeing the password in Dev when it's the same bot, OS, and version of BP.
