]> review.fuel-infra Code Review - openstack-build/heat-build.git/commit
Code Review / openstack-build / heat-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 52f5d7c) | patch
heat : ensure DB user creds aren't written decrypted
authorSteven Hardy <shardy@redhat.com>
Wed, 19 Sep 2012 10:48:29 +0000 (11:48 +0100)
committerSteven Hardy <shardy@redhat.com>
Wed, 19 Sep 2012 10:48:29 +0000 (11:48 +0100)
commit73a87433678f04b99a566340934b2f3f2557c8bc
treefe9ba1845f80654467d3ebba273fdc59be3ff9e6tree | snapshot
parent52f5d7c7fed085d695089cd8fbba8b70c7142964commit | diff
heat : ensure DB user creds aren't written decrypted

Return the decrypted user_creds record as a dict copy
and do not decrypt the credentials direct into the
sqlalchemy model object, or we can inadvertently
end up committing decrypted credentials to the DB

Ref #218

Change-Id: I0df9afcb271804557c94cdf0c913f7a26affdc83
Signed-off-by: Steven Hardy <shardy@redhat.com>
heat/db/sqlalchemy/api.py diff | blob | history
heat/engine/manager.py diff | blob | history