password in clear text

Discussion of open issues, suggestions and bugs regarding Entity Developer - ORM modeling and code generation tool
Post Reply
ssnz
Posts: 19
Joined: Mon 20 Aug 2018 21:15

password in clear text

Post by ssnz » Sun 26 Aug 2018 22:09

Hi All


I'm using windows 10 version 1803, Entity Developer 6.3.555, Postgres 10.4

I use Entity developer and have observed that the code it produces can contain the database password in clear text. I include my data context in source control and would prefer not to have the password present there in clear text.

Steps to reproduce:
1) open an existing model in Entity Developer
2) Right click on the Data Context in the Model explorer
3) Select update model from database
4) Click next
5) enter password, ensuring that "Allow Saving Password" checkbox is not ticked
6) Click Next (3 times) click finish
7) click the save button
8) ...
9) Click Generate Code
Observe that the .designer.cs includes your password, in clear text.

Work Around
Repeat steps 1-10 but include the step:
8) In Entity Developer, close and reopen the model before completing step 9
Observe that your password is no longer present in the .designer.cs file.

Why does entity developer need me to close and reopen the model to avoid saving the password in clear text?

Thanks

Shalex
Site Admin
Posts: 8660
Joined: Thu 14 Aug 2008 12:44

Re: password in clear text

Post by Shalex » Tue 28 Aug 2018 15:17

We have reproduced the issue and will notify you when it is fixed.

Shalex
Site Admin
Posts: 8660
Joined: Thu 14 Aug 2008 12:44

Re: password in clear text

Post by Shalex » Fri 31 Aug 2018 19:00

The bug with setting password as clear text in connection string when "Persist Security Info=False;" is fixed: viewtopic.php?f=3&t=37639.

ssnz
Posts: 19
Joined: Mon 20 Aug 2018 21:15

Re: password in clear text

Post by ssnz » Wed 05 Sep 2018 23:45

Thanks Shalex, it's working perfectly for me now

Post Reply