[Gnumed-devel] Workflow of and risks of including (or not including) a log file with error handler exceptions

[James Busser]

After a user clicks "send report" they are presented with a window  
warning them to inspect their log file (in case it contains sensitive  
information) before sending it. However sending the log file *is* pre- 
selected.

That is OK for the public db but if I manage to get into a production  
mode by later this year it may be wiser for this not to be pre- 
selected, especially if I might have any praxis assistants accessing  
the record. Is it feasible to make this behaviour depend on whether  
it is the public db to which the user is connected? I am sure it is  
useful to get these logs, but I worry about logs going out  
inappropriately especially to an email address outside the praxis.

In the config file, is it the workplace help desk value that  
determines the default email destination for unhandled exceptions?

Would this email address be wiser to be a property of the profile  
instead of the workplace?

Also via what port and protocol is the log being sent out? A log that  
contained sensitive information should not be leaving the local  
network except encrypted.