cancel
Showing results for 
Search instead for 
Did you mean: 

How to manage table and report password fields

mark_fryu
Participant
0 Kudos
474

Hi everyone,

I need to create a customizing table where I can insert an hide password (for example ****** )

Then inside a custom report I have to retrieve the encoded field from the table and use it.

how can I do it?

View Entire Topic
raymond_giuseppi
Active Contributor
0 Kudos

How secure do you want your password to be encrypted?

Based on this answer, check the SAP Abap tools available for this, or even external tools.

  • Encrypt it, then store it in the database
  • Also check that some input field respects this password (Is it possible not to explicitly decrypt the password - prevent debug to create a security hole...)

What did you already look for, try to use?

mark_fryu
Participant
0 Kudos

hi @raymond_giuseppi 

I tried to use this data element FIEB_ENCRYPTED_PASSWD, but it is 32 digits: my password is more than 32 digits:

mark_fryu_0-1733752032069.png

i tried also this:

mark_fryu_1-1733752126986.png

if possible, it would be good to have the password hidden too so for example with ***** could you help me to do that?

 

raymond_giuseppi
Active Contributor
0 Kudos
Just split your huge password into subset of 32 characters?
mark_fryu
Participant
0 Kudos

hi @raymond_giuseppi 

sorry i dont understand the question, do i have to divide the password by every 32 characters? For example if my password is 64 characters, then i have to create two records in table of 32 characters?

I noticed another thing, I entered some test values ​​"test" but in SE16 I see them clearly I noticed another thing, I entered some test values ​​"test" but in SE16 I see them clearly: 

mark_fryu_0-1733753566200.png

I want to hide them so that you can see *****

for example like this:

mark_fryu_0-1733753520210.png

is it possible?

raymond_giuseppi
Active Contributor
0 Kudos

No need to create multiple records, just split password string in substrings of 32 characters, encrypt each substring and concatenate the encryptyed substrings.

To display a field like a password, just define its screen attributes as INPUT and INVISIBLE

AFAIK SE16 and SE16N wont hide fields.

mark_fryu
Participant
0 Kudos

hi @raymond_giuseppi 

I don't have to show the password field in input.

the purpose is:

create a table for example ZTEST_TAB with the password type field for example auth_client_secret
inside a custom report, do the Select auth_client_secret From ZTEST_TAB
inside the code I will have to use the auth_client_secret field in the program logic to do an authentication, like this:

mark_fryu_0-1733756014894.png

 

since it's a password, I can't make it clear but I have to hide it

 

raymond_giuseppi
Active Contributor
0 Kudos

Again, you have to encrypt those passwords when saving to database, and decrypt those when reading from database...

In html format you have to use HTML <input type="password">

 

<form action="/action_page.php">
  <label for="username">Username: </label>
  <input type="text" id="username" name="username"><br>
  <label for="username">Password: </label>
  <input type="password" id="password" name="password"><br>
  <input type="submit" value="Submit">
</form>

 

 

mark_fryu
Participant
0 Kudos

hi @raymond_giuseppi 
sorry but I don't understand your proposed solution.

This would be the code to use? But I don't have to call a page, I need to create a password type field in the table and when I enter SE16 I need to display **** and not the clear value

raymond_giuseppi
Active Contributor
0 Kudos
You need to encrypt the password so that it can no longer be read by humans, what don't you understand?
mark_fryu
Participant
0 Kudos

Hi @raymond_giuseppi 

where do I insert that html code?

In SE16 i see the auth_client_secret i clear text 

1000111442.png

raymond_giuseppi
Active Contributor
0 Kudos
in the program that maintains the database table
mark_fryu
Participant
0 Kudos

Hi @raymond_giuseppi 

thanks, and in SE16 the password remains clear? is there a way to hide it?

raymond_giuseppi
Active Contributor
0 Kudos

the saved passworld can be displayed, but it will show its encrypted value

  • FIEB_PASSWORD_ENCRYPT
  • IM_DECRYPTED_PASSWORD = TEST
  • EX_ENCRYPTED_PASSWORD = } {zyxwvutsrqponmlkjihgfedcba`_^