| Subject: | Mask passwords on web.config and app.config |
| Summary: | Mask passwords on web.config and app.config |
| Audit Notes: | Edited by sanjay on 05/03/19 08:41. Edited by sanjay on 27/09/18 14:24. |
| 18 Jul 2018 | 03:45PM Comment 1 by Alvis (Link Technologies) Case 9440 added to project 09.5 |
| 30 Aug 2018 | 05:42PM Comment 2 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 30-08-2018 05:42 PM Time Taken: 60.00 |
| Development work for this case has been completed. The change will be available in version: 95BETA3 1. The following changes were made(Include Database object names, Program classes and any other relevant information):| - Encrypted APP config and IIS Connection String
- Added API for Encrypt and Decrypt function calls from Power builder
- Changed all Web forms to use encrypted passwords
- Changed POS "Server configuration" to use the encrypted password
- Changed Server connection switch to handle encrypted passwords
- Changed User management to use a single ASPNET password manager
- Refactored security management objects into a single business object
2. The issue was caused by: - NA
3. Next Step UAT - Since all forms have been modified, please validate the following: - Open and expand all forms. Ensure you can view/edit data on all forms
- Create user
- Change password
- Reset user password
- Lock user and unlick
|
|
| 07 Sep 2018 | 02:36PM Comment 3 by Sanjay (Link Technologies) Assigned To: Rashna (Edge Business Solutions) Followup Date: 07-09-2018 02:36 PM Time Taken: 2.00 |
| system test completed. proceed with UAT |
|
| 26 Sep 2018 | 11:50AM Comment 4 by Sanjay (Link Technologies) Assigned To: Alvis (Link Technologies) Followup Date: 26-09-2018 11:50 AM Time Taken: 6.00 Notes: Edited by alvis on 26/09/18 15:06. |
| QA Results Tests carried out according to requirements specified on the case header Test Results Summary Table 1 - Summarised list of issues | No | Test Description | Pass/Fail | 1 | Passwords are masked in backoffice ini file | pass | 2 | Passwords are masked in POS config file | pass | 3 | Passwords are masked in Reporter config file | pass | 4 | Passwords are masked in link scheduler config file
| pass
| 5 | Passwords are masked in web.config file | pass | | 6 | Create user | pass | | 7 | Change password | pass | | 8 | Recover password | failed. error message Non alpha numeric characters in 'newPassword' needs to be greater than or equal to '1'. | | 9 | Reset user password | pass | | 10 | Lock user and unlock | pass | | 11 | Open and expand all forms. Ensure you can view/edit data on all forms | Tested all pages - All pass. Failed items listed below | | 12 | Time view - calendar | Failed
All dropdowns are not showing correct data. It is displaying the 1st row in the drop-down. Affected dropdowns:
1. Entry Type
2. Customer
3. Project
4. Activity | | 13 | Leave view - Calendar | Failed
All dropdowns are not showing correct data. It is displaying the 1st row in the drop-down. Affected dropdowns:
1. Leave Type
2. Status | | 14 | Timesheet Log | Failed
Expanding or editing row resets the grid.
DELETE does NOT work
Steps to replicate:
1. Open Timesheet Log
2. Use parameters: Date From = 01/09/2018 Date To = 26/09/2018 and click on Load Data
3. Expand row number 6, grid resets to show 3 rows. See screenshot below
| | 15 | Purchase Order - PurchaseOrderForm.aspx | Grid missing title | | 16 | Approval Workflow - MaintainApprovalWorkflow.aspx | Grid missing title
|
Environment Details - OS version: Windows 7
- Application version: 10 beta 4
- Setup: Demo
- Server : 10.0.0.10
- Database: UAT-LINKSOFT-DemoData
Steps to reproduce failed scenarios: Next Step:
|
|
| 27 Sep 2018 | 02:24PM Comment 5 by Sanjay (Link Technologies) Assigned To: Development Followup Date: 27-09-2018 02:24 PM Time Taken: 8.00 |
| Development work for this case has been completed. The change will be available in version: 10.0.5 1. The following changes were made(Include Database object names, Program classes and any other relevant information):| - Item 8 - Changed recovery to use Admin Membership Controller
- Item 12 - Problem-related to invalid Employee ID
- Item 13 - Problem-related to invalid Employee ID
- Item 14 - Added postback to date filters
- Item 15 - Added grid title
- Item 16 - Grid title already exists in "Company Administration ~ Approval Workflow"
2. The issue was caused by: - Changes and refactoring from version 9.5
3. Next Step - UAT
|
|
| 28 Sep 2018 | 08:51AM Comment 6 by Rashna (Edge Business Solutions) Assigned To: Sanjay (Link Technologies) Followup Date: 28-09-2018 08:51 AM Time Taken: 1.00 |
| Hi San
QA Results Tests carried out according to requirements specified on the case header Test Results Summary Table 1 - Summarised list of issues | No | Test Description | Pass/Fail | | 1 | Recover Password | Pass | | 2 | Time view - calendar
| Pass
| | 3 | Leave view - Calendar
| Pass
| | 4 | Timesheet Log
| Pass
| | 5 | Purchase Order - PurchaseOrderForm.aspx
| Pass
|
Environment Details - OS version: Windows Server 2012
- Application version: 10 Beta 4
- Setup: Demo
- Server : 10.0.0.10
- Database: LINKSOFT-DEMO-10-RASHNA
Steps to reproduce failed scenarios: N/A Next Step: for closure
|
|
| 28 Sep 2018 | 10:16AM Comment 7 by Sanjay (Link Technologies) Assigned To: Sanjay (Link Technologies) Followup Date: 28-09-2018 10:16 AM |
| Thanks Rashna |
|
| 09 Oct 2019 | 08:14AM Comment 8 by Sanjay (Link Technologies) Quality control status: Pass. QC Not required - This case was created before quality check was implemented in version 11 on 30/06/2019 |