Problem/Motivation

On the Permissions settings page at /admin/people/permissions, the description for Encrypt's "Administer encryption settings" states "Warning: Give to trusted roles only; this permission has security implications. Change encryption settings (does not let them view encrypted data)."

However, the test encryption profile form at /admin/config/system/encryption/profiles/manage/PROFILE_MACHINE_NAME/test allows the admin to encrypt and decrypt text with the live key, so there is a way for accounts with "Administer encryption settings" to decrypt encrypted data.

Issue fork encrypt-3612128

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

ptmkenny created an issue. See original summary.

ptmkenny opened merge request !25

  • ptmkenny committed a5257d3f on 8.x-3.x 
    fix: #3612128 Permissions description is incorrect

By: ptmkenny
ptmkenny’s picture

ptmkenny commented
Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.