Page 1 of 1

Report Export

Posted: Wed May 24, 2023 1:18 pm
by TecnologiaMV
Good Morning!

In the report export process, it has been identified that the application is including the connection user and password in the exported files. This practice is a violation of the Brazilian General Law on Personal Data Protection (LGPD), as it exposes sensitive user information and poses a security risk.

In light of this, steps must be taken to ensure compliance with the LGPD. It is recommended that this information be encrypted or deleted from the export files so that end users do not have access to this sensitive data.

Attached is a printout illustrating the identified situation.

Should you require any further information or clarification, please feel free to contact us.

Sincerely

Re: Report Export

Posted: Wed May 24, 2023 1:30 pm
by Lech Kulikowski
Hello,

You can remove the connection string from the report and set it before the report rendering from the code.

Thank you.

Re: Report Export

Posted: Wed May 24, 2023 8:32 pm
by TecnologiaMV
Hello, good afternoon!

What connection string would that be?
Because when you export a report, it makes the connection to ElasticAPM. This library being impossible to mess with.

Sincerely

Re: Report Export

Posted: Fri May 26, 2023 10:22 am
by Vadim
Hello.

You can clear connection string on save report & setup it before render.

Code: Select all

((StiSqlDatabase) report.getDictionary().getDatabases().get(0)).setConnectionString(value)