View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0000752 | savapage-server | [All Projects] Security | public | 2016-11-29 21:56 | 2017-07-14 13:29 |
Reporter | rijkr | Assigned To | rijkr | ||
Priority | normal | Severity | feature | Reproducibility | N/A |
Status | closed | Resolution | fixed | ||
Product Version | 0.9.11 | ||||
Target Version | 0.9.12 | Fixed in Version | 0.9.12 | ||
Summary | 0000752: Disable password reset in User Web App when password is not set | ||||
Description | IST: When password of internal user is not set (or erased), a user cannot log into the User Web App by name. But, when he is able to login with other credentials (ID, NFC card, YubiKey, Google Sign-In), he is able to reset the password. SOLL: Do not offer password reset in User Web App when password is not set. This gives administrators a means to disable login by name/password. | ||||
Tags | No tags attached. | ||||
Date Modified | Username | Field | Change |
---|---|---|---|
2016-11-29 21:56 | rijkr | New Issue | |
2016-11-29 21:56 | rijkr | Status | new => assigned |
2016-11-29 21:56 | rijkr | Assigned To | => rijkr |
2016-11-29 21:57 | rijkr | Relationship added | related to 0000753 |
2016-11-29 22:09 | rijkr | Status | assigned => resolved |
2016-11-29 22:09 | rijkr | Resolution | open => fixed |
2016-11-29 22:09 | rijkr | Fixed in Version | => 0.9.12 |
2017-07-14 13:29 | rijkr | Status | resolved => closed |