Org Web Adapter

pages/eng_10077_redact_all_people_attribute_values_for_login_as_django_admin.org

ID
3d6dd6ab-ba3d-4f95-866f-0223d52f895b
ROAM_ALIASES
ENG-10077

ENG-10077 - Redact all people attribute values for login-as Django admin

- source :: https://15five-dev.atlassian.net/browse/ENG-10077

- tags :: Jira 15Five Project: People Attributes

Description

ID
485f3ce5-a458-11ea-b40e-e86a64ecc701

As a Django admin I want to ensure that custom people attribute values in the profile I am logged into as a Django admin are redacted so I do not see any PII or sensitive information about the user.

Source

https://github.com/15five/fifteen5/blob/ENG-10077-redact-people-attributes-login-as/ff/mods/account/views.py#L737

Notes

- Note taken on

Well that was fun. Turns out buried in `ff.core.utils` there are a handful of redaction function which I was supposed to be using. The problem there was that if your company happened to be in a settings variable to avoid redacting sensitive data (all test companies are in this setting) nothing will happen. Plus even tests wont pass, so you have to remove the test company from that setting for the tests to pass. That took me a few hours to figure out.