Audit Trail (Enhancement)
Posted: Tue May 13, 2014 11:14 pm
For security reasons it is not a good idea to also show the password together with the username in the audit trail, however the username/login name is fine, but either not logging the password or "blanking" (i.e. ******) the password out.
At the moment the passwords is readable; it should NOT be readable OR completely removed from the audit trail in order to prevent abuse/misuse/etc.
Thank you.