improved
Enhanced security for credentials and API keys
over 3 years ago by Jeff Zupka
We've taken steps to improve security by further restricting access to secrets stored in mabl.
Credentials
Workspace viewers can no longer view or copy credentials in plaintext. We've also removed the controls to add or delete credentials for viewers as they are not allowed to perform these actions.
| Role | Add | View | Copy | Edit | Delete |
|---|---|---|---|---|---|
| Owner | Yes | Yes | Yes | Yes | Yes |
| Editor | Yes | No | Yes | Yes | Yes |
| Viewer | No | No | No | No | No |
API Keys
Workspace owner is now the only role that can create or view API Keys in plaintext. Previously, editor and viewer roles could access the plaintext value.
| Role | Add | View/Copy | Edit | Delete |
|---|---|---|---|---|
| Owner | Yes | Yes | Yes | Yes |
| Editor | No | No | No | No |
| Viewer | No | No | No | No |