diff --git a/redback-authorization/redback-authorization-api/src/main/java/org/apache/archiva/redback/authorization/AuthorizationDataSource.java b/redback-authorization/redback-authorization-api/src/main/java/org/apache/archiva/redback/authorization/AuthorizationDataSource.java
index 392527a1..4c831fb1 100644
--- a/redback-authorization/redback-authorization-api/src/main/java/org/apache/archiva/redback/authorization/AuthorizationDataSource.java
+++ b/redback-authorization/redback-authorization-api/src/main/java/org/apache/archiva/redback/authorization/AuthorizationDataSource.java
@@ -95,7 +95,8 @@ public class AuthorizationDataSource
         final StringBuilder sb = new StringBuilder();
         sb.append( "AuthorizationDataSource" );
         sb.append( "{principal='" ).append( principal ).append( '\'' );
-        sb.append( ", user=" ).append( user );
+        // not display password in logs
+        //sb.append( ", user=" ).append( user );
         sb.append( ", permission='" ).append( permission ).append( '\'' );
         sb.append( ", resource='" ).append( resource ).append( '\'' );
         sb.append( '}' );