Daan, The child classes will "know" (since the API request/response parameters are known) at load time if they are to carry sensitive data and they can set the flags at class load time/construction like you mentioned. Flag check will be at the time of logging.
Did you mean to suggest the same or am I missing something? Thanks, Mandar On Thu, Nov 28, 2013 at 5:22 PM, Daan Hoogland <daan.hoogl...@gmail.com>wrote: > On Thu, Nov 28, 2013 at 10:38 AM, Mandar Barve <mandar.ba...@sungard.com> > wrote: > > > > In my opinion we should implement approach #2. I have tested this > approach > > for couple of sensitive commands list Users and list Accounts. It looks > to > > work fine. > > > H Mandar, I agree but can some automation be done i.e. recognize > sensitive names of fields [pP]assword or varieties thereof? This can > be done at construction or even classloadtime and shouldn't impact > performance very much. > > otherwise #2 is more elegant and i mean this as an extension of #2 > >