Skip to content

Credentials can be viewed by anyone with macro #674

Description

@mironovich

Is your feature request related to a problem? Please describe.
I poked around and found out that credentials can be easily viewed with macro

{%- set credentials = adapter.get_credentials(config.get("connection_overrides", {})) -%}
{{ credentials.get("password") }}

Describe the solution you'd like
I understand, that this method is designed to be used by internal processes, but it definitely should not be that easy to view connection for every user. So I think, this method should not be visible in macros, or it is impossible to work on project with team securely, when anyone can paste production account.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions