Hi,
thanks for that fine module!
My only problem is that every user with access to administer can see smtp password.
I would prefer if there were two fields to set a new password but never display it in clear text.
How do you think about it?

Thanks and best regards,
Ralf

CommentFileSizeAuthor
#1 633278-security.patch3.89 KBsmk-ka

Comments

smk-ka’s picture

smk-ka commented
Status: Active » Fixed
StatusFileSize
new 633278-security.patch3.89 KB

This was actually a long standing issue, thanks for bringing it to my attention again ;)

I've implemented an option to hide the password, which allows users to see the password as plaintext like today, while giving others the possibility to keep it away from peeking eyes. Win-win situation.

I've also noticed that there was no watchdog message about configuration changes, so any user with configuration access could do possibly harmful changes and no one knew who to blame ;) This has been fixed.

Committed the attached patch. It will be included in the next development snapshot.

R.Hendel’s picture

R.Hendel commented

thanks a lot :-)
Regards, Ralf

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.