Collins
Posts: 138
Joined: Wed Oct 12, 2016 2:57 pm

AI_USER_CHECK_PASSWORD To Not Log Value

Hello,

I have a project that uses the built in CheckUserCredentails custom action. I recently noticed that in the log file when AI_USER_CHECK_PASSWORD runs, it places all the values in the log, even the password.

AI_USER_CHECK_PASSWORD1AI_USER_IGNORE_FULLNAME1AI_USER_IGNORE_MSI1AI_USER_IS_GROUPDOMAIN_NAMEUSER_NAMEserviceUSER_PASSWORDpassword'.

The USER_PASSWORD prop has the hide property attribute set. Can this be changed so that it doesn't log value of USER_PASSWORD when that custom action validates the password?
Catalin
Posts: 6584
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Hello Les,

If possible, could you please give me a test-case which I can use to reproduce this on my end, as the scenario is not quite clear for me?

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube
Collins
Posts: 138
Joined: Wed Oct 12, 2016 2:57 pm

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Hi Catalin,

I have emailed you and attached the log, AIP and the steps used by the end user.
Catalin
Posts: 6584
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Hello Les,

Thank you for your project file and for the explanation.

I have forwarded your request to our dev team.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube
Catalin
Posts: 6584
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Hello Les,

After further investigations, it seems we were able to find a workaround for this issue.

In order to hide that property from the log file, we can make use of the "MsiHiddentProperties" property.

Basically, we can append the CustomActionData property to the MsiHiddenProperties and it will no longer be displayed in the log file.
MsiHiddenProperties.png
MsiHiddenProperties.png (95.09 KiB) Viewed 28645 times
Hope this helps!

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube
Collins
Posts: 138
Joined: Wed Oct 12, 2016 2:57 pm

Re: AI_USER_CHECK_PASSWORD To Not Log Value

Thank you for the workaround Catalin. I will apply it to the projects that use that dialog.
Catalin
Posts: 6584
Joined: Wed Jun 13, 2018 7:49 am

Re: AI_USER_CHECK_PASSWORD To Not Log Value

You are always welcome, Les!

Glad I was able to help.

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Feature Requests”