[Mozilla Enterprise] Disable Show Password isn't working.

[Mike Kaply]

So it also displays in the dropdown. I'll look into removing those.

I'm really confused though. Why would you allow people to store password
but then not be able to see/change them?

If they make a mistake and store a bad password, they can never fix it...

We have a new policy coming that completely removes the password manager,
but it turns off storing passwords as well because it doesn't make sense to
store them if a user can't change/remove them.

Mike

On Mon, Oct 7, 2019 at 3:02 PM <Richard_Stone at ared.uscourts.gov> wrote:

> I think I've found the problem, but no solution. You are correct, it does
> block the Saved Logins button in the Options. However, directly form the
> menu I can still get to the logins, and click the "show passwords" button.
> For security compliance reasons we need to disable the ability to view the
> saved passwords.
>
>
>
>
>
> Richard Stone
> ARED Courts IT
> 501-604-5349
>
>
>
> From:        Mike Kaply <mkaply at mozilla.com>
> To:        Richard_Stone at ared.uscourts.gov
> Cc:        "Mozilla.org" <enterprise at mozilla.org>
> Date:        10/07/2019 02:50 PM
> Subject:        Re: [Mozilla Enterprise] Disable Show Password isn't
> working.
> ------------------------------
>
>
>
> I just ran a quick check and it's working for me with just this in
> autoconfig:
>
> //
> lockPref("pref.privacy.disable_button.view_passwords", true);
>
> The Saved Logins button is disabled (not Exceptions)
>
> I'm wondering if something else is keeping it from processing?
>
> Can you move it to the beginning of the file.
>
> Mike
>
> On Mon, Oct 7, 2019 at 1:32 PM <*Richard_Stone at ared.uscourts.gov*
> <Richard_Stone at ared.uscourts.gov>> wrote:
> This is the exact line I'm putting into the .cfg file:
> lockPref("pref.privacy.disable_button.view_passwords", true);
>
> Other items from the .cfg file are configuring correctly, jut this one
> does not seam to make any difference. I can still view the saved passwords.
>
> Thanks,
>
> Richard Stone
> ARED Courts IT
> 501-604-5349
>
>
>
> From:        Mike Kaply <*mkaply at mozilla.com* <mkaply at mozilla.com>>
> To:        *Richard_Stone at ared.uscourts.gov*
> <Richard_Stone at ared.uscourts.gov>
> Cc:        "Mozilla.org" <*enterprise at mozilla.org*
> <enterprise at mozilla.org>>
> Date:        10/07/2019 11:49 AM
> Subject:        Re: [Mozilla Enterprise] Disable Show Password isn't
> working.
> ------------------------------
>
>
>
> In the cfg file, lock the pref to true and it should work (lockPref).
>
> It has to be locked in order to work.
>
> Mike
>
> On Mon, Oct 7, 2019 at 11:48 AM <*Richard_Stone at ared.uscourts.gov*
> <Richard_Stone at ared.uscourts.gov>> wrote:
> We will be deploying firefox to a few hundred clients and I want to enable
> the password manager, but disable the button to show passwords on screen,
> that's mandatory for our privacy regulations. Whether or not the password
> manager is a good idea in the first place does not matter here.
>
> I am currently testing with firefox 68.1.0esr on Windows 10 enterprise
> LTSC.
>
> Enabling the password manager is no problem, that button to show passwords
> is what kept me busy for about a day now. There even exists a config that
> is supposed to just do what i need:
> pref.privacy.disable_button.view_passwords - But this seems to do nothing
> if set to true. I've tried it in the .js file and in the .cfg file. nothing
> changes when I set this to true or to 0.
>
>
> Richard Stone
> ARED Courts IT
> 501-604-5349_______________________________________________
> Enterprise mailing list
> *Enterprise at mozilla.org* <Enterprise at mozilla.org>
> *https://mail.mozilla.org/listinfo/enterprise*
> <https://mail.mozilla.org/listinfo/enterprise>
>
> To unsubscribe from this list, please visit
> *https://mail.mozilla.org/listinfo/enterprise*
> <https://mail.mozilla.org/listinfo/enterprise> or send an email to
> *enterprise-request at mozilla.org* <enterprise-request at mozilla.org> with a
> subject of "unsubscribe"
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20191007/fcd1bc76/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: noname
Type: image/gif
Size: 9694 bytes
Desc: not available
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20191007/fcd1bc76/attachment.gif>