- ID
- 3d6dd6ab-ba3d-4f95-866f-0223d52f895b
- ROAM_ALIASES
- ENG-10077
ENG-10077 - Redact all people attribute values for login-as Django admin
- source :: https://15five-dev.atlassian.net/browse/ENG-10077
- tags :: Jira 15Five Project: People Attributes
Description
- ID
- 485f3ce5-a458-11ea-b40e-e86a64ecc701
As a Django admin I want to ensure that custom people attribute values in the profile I am logged into as a Django admin are redacted so I do not see any PII or sensitive information about the user.
Source
Notes
- Note taken on
Well that was fun. Turns out buried in `ff.core.utils` there are a handful of redaction function which I was supposed to be using. The problem there was that if your company happened to be in a settings variable to avoid redacting sensitive data (all test companies are in this setting) nothing will happen. Plus even tests wont pass, so you have to remove the test company from that setting for the tests to pass. That took me a few hours to figure out.