Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt email addresses / names #953

Open
3 tasks
ferrisoxide opened this issue Feb 1, 2024 · 0 comments
Open
3 tasks

Encrypt email addresses / names #953

ferrisoxide opened this issue Feb 1, 2024 · 0 comments
Labels
security Pull requests that address a security vulnerability task
Milestone

Comments

@ferrisoxide
Copy link
Collaborator

Describe the task

Encrypt email addresses and names, using Rails's Active Record Encryption.

NB We will want to use deterministic encryption, as we still need to look up users by name / email address.

Success Criteria

  • MUST encrypt user email addresses
  • MUST encrypt user names
  • MUST allow admins to search for users by email address or partial name

Additional Notes

Might be worth looking at integrating Ransack first, and then figuring out how to look up partial names (e.g. load into memory and filter)

@ferrisoxide ferrisoxide added task security Pull requests that address a security vulnerability labels Feb 1, 2024
@ferrisoxide ferrisoxide added this to the Gen 2 milestone Aug 25, 2024
@ferrisoxide ferrisoxide removed the gen 2 label Aug 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Pull requests that address a security vulnerability task
Projects
Status: Backlog
Development

No branches or pull requests

1 participant