trafficcontrol icon indicating copy to clipboard operation
trafficcontrol copied to clipboard

Make sensitive fields require extra click to show contents in TP

Open jhg03a opened this issue 2 years ago • 1 comments

This Improvement request (usability, performance, tech debt, etc.) affects these Traffic Control components:

  • Traffic Portal

Current behavior:

Currently showing a delivery service or SSL data of a delivery service displays sensitive data automatically. If you're doing something like demonstrating TP, this can inadvertently disclose that information to parties not entitled to see it.

New behavior:

It would be nice to have something like a show button that displays that content on pages with other insensitive data. Specifically this would apply to private SSL Key data, out-of-band interface credentials, and free-form ATS fields on delivery services such as raw remap. While parameters could also contain sensitive information, I did not include them because they are individually scoped and do not inherently share visual space with non-sensitive data. Should any of this data be included in grids, they also should be obscured.

jhg03a avatar Jul 11 '22 19:07 jhg03a

Related: https://github.com/apache/trafficcontrol/issues/3258

rawlinp avatar Jul 11 '22 19:07 rawlinp