Bug report #20662

Processing modeler: PostgreSQL execute and load SQL saves password in cleartext

Added by Samuel Oester over 2 years ago. Updated over 2 years ago.

Affected QGIS version:3.4.2 Regression?:No
Operating System:MacOS 10.11.6 Easy fix?:No
Pull Request or Patch supplied:No Resolution:no timely feedback
Crashes QGIS or corrupts data:No Copied to github as #:28482


If using a Postgres Layer with authentication stored in authentication DB as input in 'PostgreSQL execute and load SQL', credentials are stored in cleartext in output layer.
Auth DB id is not used.


#1 Updated by Victor Olaya over 2 years ago

I dont understand the error. The algorithm that you mention does not take a layer as input. Instead, it takes a DB connection (just identified with its name), and then a SQL sentence.

I just checked that, for other algorithms that take vector layers, if the layer is based on a PostGIS connection, it adds the authid as param in the log, not the credentials

#2 Updated by Giovanni Manghi over 2 years ago

  • Status changed from Open to Feedback

#3 Updated by Giovanni Manghi over 2 years ago

  • Resolution set to no timely feedback
  • Status changed from Feedback to Closed

Closing for lack of feedback.

Also available in: Atom PDF