Any chance the password can be hashed, or at least hidden once it's saved so that other site admins don't see the password?

Comments

bjlewis2’s picture

bjlewis2 commented
Title: Hash passwords? » Hash and/or hide Google Docs password?

updated title...

charlie-s’s picture

charlie-s commented

My vote is to just hide the password when the settings page is pulled back up. Encrypting / decrypting is easy enough, but I would either have to build in the private key storage or depend on a Drupal 2-way encryption module, which just seems like too much work for not enough reward. Likewise, we ought to have a permission to use the Google Docs part of a Webform and a separate permission to allow the configuration of webform_to_gdocs.

Let me add a warning to this – anyone with PHP access (PHP input filter, Devel PHP snippet, etc) on your site can grab the password, even if it was decrypted. For this reason, when I use this module on sites I create a new Google account specifically for this and assume that any admins on the site should be trusted with access to this account.

bjlewis2’s picture

bjlewis2 commented

I agree with everything above.

It would be good to have "configure webform to google docs login info" and "configure google docs on own/any webforms" permissions.
It would also be handy if you could set a different google account per user (that applies to all of their webforms), or per form.
Maybe these should be in the features request queue, but since it was mentioned here already...

Back to the original point, hiding the password after save would be sufficient for me for now.

Thanks!

charlie-s’s picture

charlie-s commented
Issue summary: View changes
Status: Active » Closed (won't fix)

No longer relevant since we use Oauth + Google Drive API.