Why does Webtools show CC number encoded in PaymentMethodAndCreditCard

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Why does Webtools show CC number encoded in PaymentMethodAndCreditCard

Vinay Agarwal
Hello,

 

Looking at the CreditCard and PaymentMethodAndCreditCard entities (e.g. on
Si's demo link
https://demo.opensourcestrategies.com:8445/ordermgr/control/main), the
cardNumber field is shown normally in CreditCard entity and with some kind
of encoding in PaymentMethodAndCreditCard for the same credit cards. I
checked createCreditCard service and it doesn't seem to encode credit card
numbers before storing. Is it a view entity display bug? Thanks in advance.

 

Regards,

Vinay Agarwal

 

Reply | Threaded
Open this post in threaded view
|

Re: Why does Webtools show CC number encoded in PaymentMethodAndCreditCard

cjhowe
in the accounting/entitydef/entitymodel.xml

for the CreditCard entity def you have the following
for the cardnumber field
      <field name="cardNumber"
type="credit-card-number" encrypt="true"></field>

the encrypt="true" will encrypt the data before being
stored so that you do not have to specifically encrypt
it before entering it into the entity.

--- Vinay Agarwal <[hidden email]> wrote:

> Hello,
>
>  
>
> Looking at the CreditCard and
> PaymentMethodAndCreditCard entities (e.g. on
> Si's demo link
>
https://demo.opensourcestrategies.com:8445/ordermgr/control/main),

> the
> cardNumber field is shown normally in CreditCard
> entity and with some kind
> of encoding in PaymentMethodAndCreditCard for the
> same credit cards. I
> checked createCreditCard service and it doesn't seem
> to encode credit card
> numbers before storing. Is it a view entity display
> bug? Thanks in advance.
>
>  
>
> Regards,
>
> Vinay Agarwal
>
>  
>
>

Reply | Threaded
Open this post in threaded view
|

RE: Why does Webtools show CC number encoded in PaymentMethodAndCreditCard

Vinay Agarwal
Chris,

Thanks for reminding me of encrypt field in the entity definition. Since the
view entities do not have a similar field in alias declaration, shouldn't
the view entity use encrypt field from the original entity definition? In
that case, the view entity should decode those fields just like the normal
entity. May be view entities should add this feature.

Regards,
Vinay Agarwal


-----Original Message-----
From: Chris Howe [mailto:[hidden email]]
Sent: Friday, September 01, 2006 10:10 AM
To: [hidden email]
Subject: Re: Why does Webtools show CC number encoded in
PaymentMethodAndCreditCard

in the accounting/entitydef/entitymodel.xml

for the CreditCard entity def you have the following for the cardnumber
field
      <field name="cardNumber"
type="credit-card-number" encrypt="true"></field>

the encrypt="true" will encrypt the data before being stored so that you do
not have to specifically encrypt it before entering it into the entity.

--- Vinay Agarwal <[hidden email]> wrote:

> Hello,
>
>  
>
> Looking at the CreditCard and
> PaymentMethodAndCreditCard entities (e.g. on Si's demo link
>
https://demo.opensourcestrategies.com:8445/ordermgr/control/main),

> the
> cardNumber field is shown normally in CreditCard entity and with some
> kind of encoding in PaymentMethodAndCreditCard for the same credit
> cards. I checked createCreditCard service and it doesn't seem to
> encode credit card numbers before storing. Is it a view entity display
> bug? Thanks in advance.
>
>  
>
> Regards,
>
> Vinay Agarwal
>
>  
>
>