[birt-dev] SECURITY ISSUE IN XML!

[sstrickland <sstrickland@xxxxxxxxxx>]

I configured BIRT to access my iSeries using jdbc.  In the XML definitions,
my password appears in the clear (not encrypted).  This is a showstopper for
me. 

BIRT version:  2.2.1.r221_v20070924


Can this be resolved?

Skip Strickland, Analyst 
Information Access Group 
Costco WHOLESALE 
(425) 313-2521 
sstrickland@xxxxxxxxxx 



              <design:dataSourceDesign>
                <design:name>ISERIESNAME</design:name>
               
<design:odaExtensionId>org.eclipse.birt.report.data.oda.jdbc</design:odaExtensionId>
                <design:publicProperties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>odaDriverClass</design:name>
                     
<design:value>com.ibm.as400.access.AS400JDBCDriver</design:value>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>odaURL</design:name>
                      <design:value>jdbc:as400://ISERIESNAME</design:value>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>odaUser</design:name>
                      <design:value>USERID</design:value>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>odaPassword</design:name>
                      <design:value>UNENCRYPTED PASSWORD</design:value>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>odaJndiName</design:name>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>OdaConnProfileName</design:name>
                    </design:nameValue>
                  </design:properties>
                  <design:properties>
                    <design:nameValue>
                      <design:name>OdaConnProfileStorePath</design:name>
                    </design:nameValue>
                  </design:properties>
                </design:publicProperties>
              </design:dataSourceDesign>

-- 
View this message in context: http://www.nabble.com/SECURITY-ISSUE-IN-XML%21-tf4531404.html#a12931382
Sent from the Eclipse BIRT - Dev mailing list archive at Nabble.com.