Should Bamboo password variables be visible in Metadata?

Question

We are using passwords stored in global and plan variables, which for obvious reasons we don't want visible to everyone with access to the build results. While the password is correctly blanked out in the build logs, it is still visible in clear text in the 'Metadata' tab.

Is this by design? If so, how can we store passwords without having it visible from the build results screen? If not should I log an issue?

We are using Bamboo version 4.1 build 3100.

Przemek Bruski · Accepted Answer

Bamboo hides variables with names containing the word "password" but unfortunately, not everywhere in the UI. There's a good chance this will be addressed in 4.3.