openerp-india team mailing list archive

[Launchpad Bug Tracker <1015092@xxxxxxxxxxxxxxxxxx>]

You have been subscribed to a public bug:

On your database
1.  load a module with password fields (like import_google)
2. Set information on user form like login and pass of google
3. If you have access to "set default", e.g as an admin, you potentially have access to all the google accounts of your members.

I don't know if it's specifically the import_google or the webclient in
general that should be checked, but I think it's a security issue.

** Affects: openobject-server
     Importance: Undecided
         Status: New


** Tags: 6.1 google import profserv trunk webclient
-- 
password fields are visible thanks to "set default"
https://bugs.launchpad.net/bugs/1015092
You received this bug notification because you are a member of OpenERP Indian Team, which is subscribed to OpenERP Server.