Remove or hide password in Data Source UI #10474

Closed
opened 2025-12-29 21:31:58 +01:00 by adam · 1 comment
Owner

Originally created by @mskalecki on GitHub (Nov 13, 2024).

Originally assigned to: @mskalecki on GitHub.

NetBox version

v4.1.6

Feature type

Change to existing functionality

Triage priority

I volunteer to perform this work (if approved)

Proposed functionality

Remove or hide the plain text password that is currently displayed in the Backend section of the Data Source view.

Use case

I'm using fine-grained personal access tokens to connect to private GitHub repositories as Data Sources. While these access tokens have very minimal permissions, I don't think they should be displayed in plain text any time I navigate to the Data Source in the UI.

At a minimum, the password / PAT should be hidden (requiring a click to expose the plain text), but I can't see any good reason to show them at all and would just remove it from the view entirely.

Database changes

None

External dependencies

None

Originally created by @mskalecki on GitHub (Nov 13, 2024). Originally assigned to: @mskalecki on GitHub. ### NetBox version v4.1.6 ### Feature type Change to existing functionality ### Triage priority I volunteer to perform this work (if approved) ### Proposed functionality Remove or hide the plain text password that is currently displayed in the `Backend` section of the `Data Source` view. ### Use case I'm using fine-grained personal access tokens to connect to private GitHub repositories as Data Sources. While these access tokens have very minimal permissions, I don't think they should be displayed in plain text any time I navigate to the Data Source in the UI. At a minimum, the password / PAT should be hidden (requiring a click to expose the plain text), but I can't see any good reason to show them at all and would just remove it from the view entirely. ### Database changes None ### External dependencies None
adam added the status: acceptedtype: featurecomplexity: low labels 2025-12-29 21:31:58 +01:00
adam closed this issue 2025-12-29 21:31:58 +01:00
Author
Owner

@mskalecki commented on GitHub (Nov 13, 2024):

I took a look at the relevant html template, and I see that the sensitive_parameters (including password) are hidden from users who don't have permissions to change the fields, but really this should be hidden from everyone, especially in the non-edit view.

@mskalecki commented on GitHub (Nov 13, 2024): I took a look at the relevant html template, and I see that the `sensitive_parameters` (including `password`) are hidden from users who don't have permissions to change the fields, but really this should be hidden from everyone, especially in the non-edit view.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#10474