Mailing-List: contact continuum-issues-help@maven.apache.org; run by ezmlm
Precedence: bulk
Reply-To: continuum-dev@maven.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: 
 <11791709.1197917277345.JavaMail.haus-jira@codehaus01.managed.contegix.com>
Date: Mon, 17 Dec 2007 12:47:57 -0600 (CST)
From: "Wendy Smoak (JIRA)" <jira@codehaus.org>
To: continuum-issues@maven.apache.org
Subject: [jira] Created: (CONTINUUM-1605) Continuum should not store the
 password at all if 'use cached credentials' is checked
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Continuum should not store the password at all if 'use cached credentials' is checked
-------------------------------------------------------------------------------------

                 Key: CONTINUUM-1605
                 URL: http://jira.codehaus.org/browse/CONTINUUM-1605
             Project: Continuum
          Issue Type: Improvement
          Components: Database, SCM
    Affects Versions: 1.1
            Reporter: Wendy Smoak


Continuum is storing scm passwords in the database in plain text.

If the 'use cached credentials' checkbox is checked, it should use the provided password for the initial pom retrieval, and then discard it.

(Continuum has the ability to use svn credentials that have been pre-cached on the build server, but when you add a project the first request for the pom is not a svn checkout, it's just an http/https GET.)

Workaround:  periodically remove the passwords from the database:
update PROJECT set SCM_PASSWORD = "";

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira