[ofbiz-framework] branch trunk updated: Documented: warns users about demo credentials in production

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[ofbiz-framework] branch trunk updated: Documented: warns users about demo credentials in production

jleroux@apache.org
This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/trunk by this push:
     new 2b2a43e  Documented: warns users about demo credentials in production
2b2a43e is described below

commit 2b2a43e4883d395e2044c2f9fc48ac6eb7f0109d
Author: Jacques Le Roux <[hidden email]>
AuthorDate: Sat Aug 29 09:54:24 2020 +0200

    Documented: warns users about demo credentials in production
---
 README.adoc | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/README.adoc b/README.adoc
index 33805f8..4dfd0a2 100644
--- a/README.adoc
+++ b/README.adoc
@@ -136,8 +136,10 @@ Once proper mitigations to the security issues are complete the OFBiz team will
 disclose this information to the public mailing list.
 
 You can find more information about security in OFBiz at
-https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping
-OFBiz secure]
+https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping OFBiz secure]
+
+[CAUTION]
+In production never use the credentials contained in demo data. Not only the admin credentials, but all of them.
 
 [[build-system-syntax]]
 == Build system syntax
@@ -278,8 +280,7 @@ operating system kill command. Use this command to force OFBiz termination if
 the --shutdown command does not work. Usually this is needed when in the middle
 of data loading or testing in OFBiz.
 
-Warning: Be careful in using this command as force termination might lead to
-inconsistent state / data
+Warning: Be careful in using this command as force termination might lead to inconsistent state / data
 
 `gradlew terminateOfbiz`
 
@@ -394,13 +395,13 @@ dash!
 Loads all data sets; meant for initial loading of generic OFBiz data. Can be
 applied for development, testing, demonstration, etc. purposes. Be aware that
 executing this task can result in your data being overwritten in your database
-of choice. Use with caution in production environments.
+of choice.
 
-`gradlew loadAll`
+`gradlew loadAll` OR `gradlew "ofbiz --load-data"`
 
-OR
+[CAUTION]
+Use with caution in production environments.
 
-`gradlew "ofbiz --load-data"`
 
 [[load-seed-data]]
 ==== Load seed data