We've taken steps to improve security by further restricting access to secrets stored in mabl.

Credentials

Workspace viewers can no longer view or copy credentials in plaintext. We've also removed the controls to add or delete credentials for viewers as they are not allowed to perform these actions.

API Keys

Workspace owner is now the only role that can create or view API Keys in plaintext. Previously, editor and viewer roles could access the plaintext value.