Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1062183 - [RFE] Save only sensitive configuration data in "Secret Service"
Summary: [RFE] Save only sensitive configuration data in "Secret Service"
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: libreport
Version: rawhide
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
Assignee: abrt
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-02-06 12:17 UTC by Alois Mahdal
Modified: 2018-06-21 09:16 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:


Attachments (Terms of Use)
Bugzilla configuration dialog w/ warning (after step 8) (deleted)
2014-02-06 12:17 UTC, Alois Mahdal
no flags Details

Description Alois Mahdal 2014-02-06 12:17:28 UTC
Created attachment 860111 [details]
Bugzilla configuration dialog w/ warning (after step 8)

Description of problem:
I would like to save Bugzilla username in abrt, so that I don't have to type it each time.  OTOH, I don't want to save the password.

Problem is that I can't save the settings without using gnome-keyring (or whatever similar "secret service" gnome-abrt is using).  Even if I explicitly check "Don't store passwords" in the Bugzilla configuration, I'm still asked for keyring password, and when I cancel that, Bugzilla configuration dialog warns me that my settings won't be saved (see screen for the final dialog).


Version-Release number of selected component (if applicable):
gnome-abrt-0.3.5-1.fc20.x86_64


How reproducible:
100%


Steps to Reproduce:
 1. Have something crash and that event caught by ABRT
 2. Proceed with analyzing the crash
    > Before submission, abrt warns you that "Bugzilla is not properly
      configured..."
 3. Click "Configure Bugzilla"
 4. Enter your Bugzilla account name (for purposes of this test I guess
    you could get away with any string here)
 5. Check "Don't store passwords" and confirm dialog
    > You are asked for password by gnome keyring
 6. Cancel the keyring request
    > Error message from gnome-abrt about Dbus appears
 7. Cancel the dbus error
    > You are back at warning from step 2
 8. Click "Configure Bugzilla" again
    > The dialog now has warning that settings won't be saved at all


Actual results:
The Bugzilla configuration dialog now warns you that your settings will not be saved.


Expected results:
Provided that you don't want to save the password, you should not need the "Secret Service" and the rest of the options should be saved normally.


Additional info:
I haven't tested that, but this may also apply to other options in the dialog, e.g. "Verify SSL" or ones under "Advanced" extender.  IOW you should be able to save anything from that dialog without authenticating with the keyring service, the password being only exception.

Comment 1 Jakub Filak 2014-02-06 13:39:44 UTC
> Expected results:
> Provided that you don't want to save the password, you should not need the
> "Secret Service" and the rest of the options should be saved normally.
> 
Please define "saved normally" from your point of view.

From ABRT's point of view,s "saved normally" means stored in gnome-keyring. IOW not only passwords are stored in Secret service.

If you don't wan to use gnome-keyring, open the link in "Bugzilla is not properly configured..." dialogue and configure ABRT according that guide [1].


1: https://fedorahosted.org/abrt/wiki/AbrtConfiguration#Adjustingpluginconfiguration

Comment 2 Alois Mahdal 2014-02-06 19:50:13 UTC
(In reply to Jakub Filak from comment #1)
>
> Please define "saved normally" from your point of view.

"saved normally" - saved to a config file, probably somewhere under $XDG_CONFIG_HOME.  Preferably in user-readable and greppable form.


> From ABRT's point of view,s "saved normally" means stored in gnome-keyring.
> IOW not only passwords are stored in Secret service.

From usability point of view, it's not the best idea to save configuration to keyring, since that can lead to other problems.  For example, if user was having problems with reporting crashes to Bugzilla, would you ask them to send you their keyring and password? ;)  And there could be other examples...


> If you don't want to use gnome-keyring, open the link in "Bugzilla is not
> properly configured..." dialogue and configure ABRT according that guide [1].

I admit I'm guilty of not reading the linked document.  Now I have read it so I'll try using the .cache/abrt/events/report_Bugzilla.conf file.

~

Basically this bug is about unnecessary (and for me hard to understand) dependency: you need a keyring service to save something that is not a sensitive data.

Comment 3 Jakub Filak 2014-02-07 09:19:33 UTC
(In reply to Alois Mahdal from comment #2)
> (In reply to Jakub Filak from comment #1)
> >
> > Please define "saved normally" from your point of view.
> 
> "saved normally" - saved to a config file, probably somewhere under
> $XDG_CONFIG_HOME.  Preferably in user-readable and greppable form.
> 
> ...
>
> Basically this bug is about unnecessary (and for me hard to understand)
> dependency: you need a keyring service to save something that is not a
> sensitive data.

Your point makes sense to me, however, implementation of this feature has low priority as the current implementation works just fine for most of ABRT users.


Note You need to log in before you can comment on or make changes to this bug.