From b92a4dc450723d9b6e0ea4ad613d1025709a9ab3 Mon Sep 17 00:00:00 2001
From: aroth01 <aroth01@gmail.com>
Date: Fri, 26 May 2023 00:42:16 +0000
Subject: [PATCH] 12625: change datasource password display and hide for
 read-only users

---
 netbox/templates/core/datasource.html | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/netbox/templates/core/datasource.html b/netbox/templates/core/datasource.html
index c69569358..b1bd591ca 100644
--- a/netbox/templates/core/datasource.html
+++ b/netbox/templates/core/datasource.html
@@ -2,6 +2,7 @@
 {% load static %}
 {% load helpers %}
 {% load plugins %}
+{% load perms %}
 {% load render_table from django_tables2 %}
 
 {% block extra_controls %}
@@ -88,7 +89,16 @@
             {% for name, field in object.get_backend.parameters.items %}
               <tr>
                 <th scope="row">{{ field.label }}</th>
-                <td>{{ object.parameters|get_key:name|placeholder }}</td>
+                {% if field.label == "Password" %}
+                  <td>
+                    {% if request.user|can_add:object or request.user|can_change:object or request.user|can_delete:object %}
+                      <span id="secret" class="font-monospace" data-secret="{{ object.parameters|get_key:name }}">{{ object.parameters|get_key:name|placeholder }}</span>
+                      <button type="button" class="btn btn-sm btn-primary toggle-secret float-end" data-bs-toggle="button">Show Secret</button>
+                    {% endif %}
+                  </td>
+                {% else %}
+                  <td>{{ object.parameters|get_key:name|placeholder }}</td>
+                {% endif %}
               </tr>
             {% empty %}
               <tr>