Double encryption when workflows run on encrypt type fields #5012

Open
opened 2026-02-20 16:27:56 -05:00 by deekerman · 0 comments
Owner

Originally created by @faizanaliyounas on GitHub (May 4, 2023).

Suite CRM encrypt type field stores encrypted data in database. But when I run workflow on it it encrypt the data two times and when I try to fetch the data is shows encrypted data .

Issue

SuiteCRM provides an "Encrypt" type field that allows users to store sensitive data in an encrypted form. This encrypted data is then stored in the database and can be retrieved when needed. However, it seems that there is an issue when running workflows on this data.

When a workflow is triggered on the encrypted data, it appears that the data is being encrypted again. This means that the data is being doubly encrypted and as a result, when it is fetched, it appears to be encrypted.

Expected Behavior

When the workflow has been run and I subsequently fetch the data, the string appears to be encrypted, as it was prior to the application of the workflow

Possible Fix

The encryption of 'Encrypt' type fields should not be performed by the workflow core functionality, and this issue should be resolved.

Steps to Reproduce

  1. create a encrypt type field
  2. populate it in any module(the data will be shown exactly you entered)
    3.now create a workflow on any of the field
    4.now again populate that field (workflow should run for that record)
    5.now the encrypted field display something else (that is encrypted string that happens first time)

Context

I am trying to add SSN encrypted field high

Your Environment

  • SuiteCRM Version used:713.0
    Browser name and version (e.g. Chrome Version 51.0.2704.63 (64-bit)): Chromium Version 96.0.4664.93
  • Environment name and version (e.g. MySQL, PHP 7): PHP7.4
  • Operating System and version (e.g Ubuntu 16.04): Ubuntu Version 96.0.4664.93
Originally created by @faizanaliyounas on GitHub (May 4, 2023). Suite CRM encrypt type field stores encrypted data in database. But when I run workflow on it it encrypt the data two times and when I try to fetch the data is shows encrypted data . #### Issue SuiteCRM provides an "Encrypt" type field that allows users to store sensitive data in an encrypted form. This encrypted data is then stored in the database and can be retrieved when needed. However, it seems that there is an issue when running workflows on this data. When a workflow is triggered on the encrypted data, it appears that the data is being encrypted again. This means that the data is being doubly encrypted and as a result, when it is fetched, it appears to be encrypted. #### Expected Behavior When the workflow has been run and I subsequently fetch the data, the string appears to be encrypted, as it was prior to the application of the workflow #### Possible Fix The encryption of 'Encrypt' type fields should not be performed by the workflow core functionality, and this issue should be resolved. #### Steps to Reproduce 1. create a encrypt type field 2. populate it in any module(the data will be shown exactly you entered) 3.now create a workflow on any of the field 4.now again populate that field (workflow should run for that record) 5.now the encrypted field display something else (that is encrypted string that happens first time) #### Context <!--- How has this bug affected you? What were you trying to accomplish? --> I am trying to add SSN encrypted field <!--- If you feel this should be a low/medium/high priority then please state so --> high #### Your Environment <!--- Include as many relevant details about the environment you experienced the bug in --> * SuiteCRM Version used:713.0 Browser name and version (e.g. Chrome Version 51.0.2704.63 (64-bit)): Chromium Version 96.0.4664.93 * Environment name and version (e.g. MySQL, PHP 7): PHP7.4 * Operating System and version (e.g Ubuntu 16.04): Ubuntu Version 96.0.4664.93
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/SuiteCRM-SuiteCRM#5012
No description provided.