by shannah » Mon Jan 12, 2009 6:18 pm
Xataface, as a security feature, never actually loads the values from any password columns into memory. They are a sort of "write only" field type. Xataface identifies fields named 'password' (or fields whose names contain the string 'password') as password fields.
This is a feature and not a bug.
Workarounds:
1. Use the __sql__ directive in the fields.ini file to introduce a grafted field copy of the password field.
2. use the beforeHandleRequest() method in the application delegate class to programmatically change the widget:type attribute of the password field for the export_csv function.
3. Use a MySQL view for exporting.
Whatever you do, you should be careful not to let people who shouldn't have access to the passwords see them.
-Steve