Org Web Adapter

Editing pages/eng_10077_redact_all_people_attribute_values_for_login_as_django_admin.org

:PROPERTIES:
:ID:       3d6dd6ab-ba3d-4f95-866f-0223d52f895b
:ROAM_ALIASES: ENG-10077
:END:
#+TITLE: ENG-10077 - Redact all people attribute values for login-as Django admin

- source :: https://15five-dev.atlassian.net/browse/ENG-10077
- tags :: [[id:b71b60df-d439-4aa1-8c2c-265707adf8ec][Jira]] [[id:ca1d297e-764f-4c7d-90c7-93f448fee10b][15Five Project: People Attributes]]

* Description
:PROPERTIES:
:ID:       485f3ce5-a458-11ea-b40e-e86a64ecc701
:END:

As a Django admin I want to ensure that custom people attribute values in the profile I am logged into as a Django admin are redacted so I do not see any PII or sensitive information about the user.

* Source

https://github.com/15five/fifteen5/blob/ENG-10077-redact-people-attributes-login-as/ff/mods/account/views.py#L737

* Notes
- Note taken on [2020-06-03 Wed 15:53]
  Well that was fun. Turns out buried in `ff.core.utils` there are a handful of redaction function which I was supposed to be using. The problem there was that if your company happened to be in a settings variable to avoid redacting sensitive data (all test companies are in this setting) nothing will happen. Plus even tests wont pass, so you have to remove the test company from that setting for the tests to pass. That took me a few hours to figure out.