Files
gerrit/polygerrit-ui/app/elements/settings/gr-http-password
Han-Wen Nienhuys 2d4b50c3d1 PolyGerrit: don't show current HTTP password
With the move to NoteDB, the per-account data (including the HTTP
password) will be stored in a user-branch in the All-Users repo, where
it is subject to Gerrit ACLs.  Since these are notoriously hard to
set up correctly, we want to avoid storing the password in plaintext.

The simplest solution is to store the password in hashed form, which
precludes showing the current passwords in the settings UI.

This change removes the password GET call from PolyGerrit.

Bug: Issue 5373
Change-Id: I4f93873bdee0b82aaaf85090d0aa271a94ea8e17
2017-02-03 11:20:51 -08:00
..