You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2020/08/29 08:10:22 UTC

[ofbiz-framework] branch release18.12 updated: Documented: warns users about demo credentials in production

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new 9366d19  Documented: warns users about demo credentials in production
9366d19 is described below

commit 9366d196af42df75a6956f1ff0769c35f862cd28
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Sat Aug 29 09:54:24 2020 +0200

    Documented: warns users about demo credentials in production
---
 README.adoc | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/README.adoc b/README.adoc
index ef7d903..6b556ce 100644
--- a/README.adoc
+++ b/README.adoc
@@ -131,8 +131,10 @@ Once proper mitigations to the security issues are complete the OFBiz team will
 disclose this information to the public mailing list.
 
 You can find more information about security in OFBiz at
-https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping
-OFBiz secure]
+https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping OFBiz secure]
+
+[CAUTION]
+In production never use the credentials contained in demo data. Not only the admin credentials, but all of them.
 
 [[build-system-syntax]]
 == Build system syntax
@@ -274,8 +276,7 @@ operating system kill command. Use this command to force OFBiz termination if
 the --shutdown command does not work. Usually this is needed when in the middle
 of data loading or testing in OFBiz.
 
-Warning: Be careful in using this command as force termination might lead to
-inconsistent state / data
+Warning: Be careful in using this command as force termination might lead to inconsistent state / data
 
 `gradlew terminateOfbiz`
 
@@ -394,13 +395,13 @@ dash!
 Loads all data sets; meant for initial loading of generic OFBiz data. Can be
 applied for development, testing, demonstration, etc. purposes. Be aware that
 executing this task can result in your data being overwritten in your database
-of choice. Use with caution in production environments.
+of choice. 
 
-`gradlew loadAll`
+`gradlew loadAll` OR `gradlew "ofbiz --load-data"`
 
-OR
+[CAUTION]
+Use with caution in production environments.
 
-`gradlew "ofbiz --load-data"`
 
 [[load-seed-data]]
 ==== Load seed data