Bug report #20662
Processing modeler: PostgreSQL execute and load SQL saves password in cleartext
|Affected QGIS version:||3.4.2||Regression?:||No|
|Operating System:||MacOS 10.11.6||Easy fix?:||No|
|Pull Request or Patch supplied:||No||Resolution:||no timely feedback|
|Crashes QGIS or corrupts data:||No||Copied to github as #:||28482|
If using a Postgres Layer with authentication stored in authentication DB as input in 'PostgreSQL execute and load SQL', credentials are stored in cleartext in output layer.
Auth DB id is not used.
#1 Updated by Victor Olaya over 1 year ago
I dont understand the error. The algorithm that you mention does not take a layer as input. Instead, it takes a DB connection (just identified with its name), and then a SQL sentence.
I just checked that, for other algorithms that take vector layers, if the layer is based on a PostGIS connection, it adds the authid as param in the log, not the credentials