reset_password_XX.csv and permissions

wsupport111 — Tue, 07 Nov 2017 17:00:56 GMT

Hi, I am using Alfresco Community and we have had these csv files build up in our repository for a long timeThey have been called reset_password_{number}.csv and have contained the login details of all users both internal and externalHowever only recently all our users have been able to see themBefo

Re: reset_password_XX.csv and permissions

marktielemans — Wed, 08 Nov 2017 20:04:14 GMT

Hi Ken,

What version of Alfresco are you using? What authentication subsystems are active?

I'm fairly sure no part of Alfresco would normally generate these files. It might be a modification someone has made and-/or applied to your Alfresco instance. You could check the amps and addons folders to see extensions that you may have.

You could also check the server log to see if there is any mention of a job creating these files, or check the creator of the password files.

I'd highly recommend disabling the creation of and removing these files if you can, but if you can't, you could change the permissions on the containing folder, or the files themselves, to be visible for administrators only.

See: User roles and permissions | Alfresco Documentation

topic Re: reset_password_XX.csv and permissions in Alfresco Forum

reset_password_XX.csv and permissions

Re: reset_password_XX.csv and permissions