CON-1562 - Export of sensitive data

Created by Rick Read 07 Aug 2018, 12:07:49 Updated by Sebastiaan Janssen 04 Sep 2018, 09:13:56

Tags: Gold partner

Relates to: CON-1490

Linked to http://issues.umbraco.org/issue/CON-1490

When marking a field as sensitive in Umbraco, although I am a member of the Sensitive Data group I appear to be receiving a generic message for all values when exporting form entries into Excel.

According to the PR for the linked issue, the generic message appears for all users exporting data, regardless of their permission. I would expect that if I have permission to view the data, I should also be able to export it too.

Kind regards, Rick

Comments

Simon Thomas 08 Aug 2018, 19:31:21

I tend to agree - it is nice to have the sensitive data restricted in the UI, but there are going to be many instances where clients need to be able to download the data for further processing (we have such a case right now)


Gareth Wright 10 Aug 2018, 10:12:24

I agree.

The UI does state the following on the toggle for sensitive data as well: -- "Prevent the data from being viewed and exported if a user doesn't have sufficient permissions.".

This tends to read that if I have access to the sensitive data user group, I have the permissions to view and export.

Potentially this could be solved by altering the messaging to be clearer, or providing two toggles, sensitive and exportable?


Sebastiaan Janssen 04 Sep 2018, 09:13:50

Fixed in PR https://github.com/umbraco/Forms/pull/201

Version 7.0.4 will be out next week, which includes this fix.


Priority: Normal

Type: Bug

State: Fixed

Assignee:

Difficulty:

Category:

Backwards Compatible: True

Fix Submitted:

Affected versions:

Due in version: 7.0.4

Sprint:

Story Points:

Cycle: