[IDEA] Configuration setting to hide values in Global Map panel

[mikeyw]

Is your feature request related to a problem? Please describe.
With Configuration Map entries, the default setting in the Mirth Administrator is to hide the values. The same functionality would be useful in the Global Maps panel of the Dashboard.

Describe your use case
To maintain high security, my organization regularly rotates database passwords. To avoid having to reconfigure database connections in each channel, we store the credentials in the Global Map and reference the them in the channels. This works very well, but the one drawback is that the database credentials are visible in plain text in the Global Maps panel to any onlooker that passes by the developer's desk. Having the values hidden by default would increase security.

Describe the solution you'd like
Add a checkbox to the Global Map panel in the Mirth Administrator Dashboard the gives the option to show or hide Global Map values. Default the checkbox to the "hide"

Describe alternatives you've considered
We have considered loading the database credentials from a file in a secured folder, but that adds unwanted overhead.

[kirbykn2]

I am curious, why not store the credentials in the configMap?

…

On Mon, May 15, 2023 at 2:07 PM Michael Wolfe ***@***.***> wrote: *Is your feature request related to a problem? Please describe.* With Configuration Map entries, the default setting in the Mirth Administrator is to hide the values. The same functionality would be useful in the Global Maps panel of the Dashboard. *Describe your use case* To maintain high security, my organization regularly rotates database passwords. To avoid having to reconfigure database connections in each channel, we store the credentials in the Global Map and reference the them in the channels. This works very well, but the one drawback is that the database credentials are visible in plain text in the Global Maps panel to any onlooker that passes by the developer's desk. Having the values hidden by default would increase security. *Describe the solution you'd like* Add a checkbox to the Global Map panel in the Mirth Administrator Dashboard the gives the option to show or hide Global Map values. Default the checkbox to the "hide" *Describe alternatives you've considered* We have considered loading the database credentials from a file in a secured folder, but that adds unwanted overhead. — Reply to this email directly, view it on GitHub <#5783>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/APRXWD5R7KQYP46CGGRQ7U3XGJWGRANCNFSM6AAAAAAYCRN2JE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Best, Kirby Knight | 231.735.4650 | ***@***.***

[pacmano1]

I agree with the original ask. In fact the only thing in $cfg for our work is enough for one DB connect to then go get everything else needed which is stored in $g.

In our case, everything per EHR brand is sourced from a DB (e.g. base_url, creds, potential decision logic, etc.) and stored to $g in JS objects for accessability by channels. $cfg does not accept objects.

[mikeyw]

We rotate passwords, and it’s easier for our DevOps team to write to password files and then use Mirth CLI to deploy one utility channel which triggers the Global Deploy script to update the passwords in the Global Map.

…

________________________________ From: kirbykn2 ***@***.***> Sent: Monday, May 15, 2023 2:21:39 PM To: nextgenhealthcare/connect ***@***.***> Cc: Michael Wolfe ***@***.***>; Author ***@***.***> Subject: Re: [nextgenhealthcare/connect] [IDEA] Configuration setting to hide values in Global Map panel (Issue #5783) I am curious, why not store the credentials in the configMap?

On Mon, May 15, 2023 at 2:07 PM Michael Wolfe ***@***.***> wrote: *Is your feature request related to a problem? Please describe.* With Configuration Map entries, the default setting in the Mirth Administrator is to hide the values. The same functionality would be useful in the Global Maps panel of the Dashboard. *Describe your use case* To maintain high security, my organization regularly rotates database passwords. To avoid having to reconfigure database connections in each channel, we store the credentials in the Global Map and reference the them in the channels. This works very well, but the one drawback is that the database credentials are visible in plain text in the Global Maps panel to any onlooker that passes by the developer's desk. Having the values hidden by default would increase security. *Describe the solution you'd like* Add a checkbox to the Global Map panel in the Mirth Administrator Dashboard the gives the option to show or hide Global Map values. Default the checkbox to the "hide" *Describe alternatives you've considered* We have considered loading the database credentials from a file in a secured folder, but that adds unwanted overhead. — Reply to this email directly, view it on GitHub <#5783>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/APRXWD5R7KQYP46CGGRQ7U3XGJWGRANCNFSM6AAAAAAYCRN2JE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Best, Kirby Knight | 231.735.4650 | ***@***.*** — Reply to this email directly, view it on GitHub<#5783 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AACUQ3QXSQAX3CIFDZEY2ODXGJX3HANCNFSM6AAAAAAYCRN2JE>. You are receiving this because you authored the thread.Message ID: ***@***.***>