On Thu, Nov 28, 2013 at 10:38 AM, Mandar Barve <mandar.ba...@sungard.com> wrote: > > In my opinion we should implement approach #2. I have tested this approach > for couple of sensitive commands list Users and list Accounts. It looks to > work fine.
H Mandar, I agree but can some automation be done i.e. recognize sensitive names of fields [pP]assword or varieties thereof? This can be done at construction or even classloadtime and shouldn't impact performance very much. otherwise #2 is more elegant and i mean this as an extension of #2