[syncope] branch 2_1_X updated: [SYNCOPE-1563] Fixed password mangement in user approval form (#188)

[an...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

andreapatricelli pushed a commit to branch 2_1_X
in repository https://gitbox.apache.org/repos/asf/syncope.git


The following commit(s) were added to refs/heads/2_1_X by this push:
     new 6b7d561  [SYNCOPE-1563] Fixed password mangement in user approval form (#188)
6b7d561 is described below

commit 6b7d561bf5111146cccd8b0259a1c8f108f295ad
Author: Andrea Patricelli <an...@apache.org>
AuthorDate: Fri May 15 14:18:41 2020 +0200

    [SYNCOPE-1563] Fixed password mangement in user approval form (#188)
    
    * [SYNCOPE-1563] Do not initialize user approval form with the password taken from workflow
---
 .../syncope/client/console/panels/UserRequestFormDirectoryPanel.java  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java b/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
index 37a7150..3a39b7d 100644
--- a/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
+++ b/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
@@ -228,6 +228,10 @@ public class UserRequestFormDirectoryPanel
                 UserTO previousUserTO;
                 if (formTO.getUserPatch() == null) {
                     newUserTO = formTO.getUserTO();
+                    if (newUserTO != null) {
+                        // SYNCOPE-1563 do not use the password into formTO.getUserTO()
+                        newUserTO.setPassword(null);
+                    }
                     previousUserTO = null;
                 } else if (formTO.getUserTO() == null) {
                     // make it stronger by handling possible NPE