You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ofbiz.apache.org by ian tabangay <it...@gmail.com> on 2008/06/27 07:27:35 UTC

Change UserLogin Password Bug?

Hi. Im looking at a May release of Ofbiz and noticed that the Change
UserLogin Password does not check the current password of user. The form is
processed for as long as the New Password and New Password Verify Field has
been populated. Has this been fixed in the current release?


Ian

Re: Change UserLogin Password Bug?

Posted by ian tabangay <it...@gmail.com>.
Oh I see. yes I was using a user with admin permissions then. Thanks for
clarifying that.

Ian

On Sat, Jun 28, 2008 at 1:43 AM, Jacques Le Roux <
jacques.le.roux@les7arts.com> wrote:

> Yes, I did not check the code and was thinking it may be related to the
> recent encrypt changes. As you well explained David, there are not enough
> information in the question.
>
> Jacques

Re: Change UserLogin Password Bug?

Posted by Jacques Le Roux <ja...@les7arts.com>.
Yes, I did not check the code and was thinking it may be related to the recent encrypt changes. As you well explained David, there 
are not enough information in the question.

Jacques

From: "David E Jones" <jo...@hotwaxmedia.com>
>
> I'm actually not aware of any changes related to that, but there could  be.
>
> Ian: what you're probably seeing is the behavior when you are logged  in as an admin, in which case you can change other people's 
> passwords  (and your own) without knowing their current password.
>
> Of course, that's a total guess because there was not sufficient  detail in your question (no name of a screen or any information 
> about  what you did and expected to happen, and what actually happened).
>
> -David
>
>
> On Jun 27, 2008, at 1:07 AM, Jacques Le Roux wrote:
>
>> Yes, there are been changes around that, please check last trunk  revision
>>
>> Jacques
>>
>> From: "ian tabangay" <it...@gmail.com>
>>> Hi. Im looking at a May release of Ofbiz and noticed that the Change
>>> UserLogin Password does not check the current password of user. The  form is
>>> processed for as long as the New Password and New Password Verify  Field has
>>> been populated. Has this been fixed in the current release?
>>> Ian
>>>
> 


Re: Change UserLogin Password Bug?

Posted by David E Jones <jo...@hotwaxmedia.com>.
I'm actually not aware of any changes related to that, but there could  
be.

Ian: what you're probably seeing is the behavior when you are logged  
in as an admin, in which case you can change other people's passwords  
(and your own) without knowing their current password.

Of course, that's a total guess because there was not sufficient  
detail in your question (no name of a screen or any information about  
what you did and expected to happen, and what actually happened).

-David


On Jun 27, 2008, at 1:07 AM, Jacques Le Roux wrote:

> Yes, there are been changes around that, please check last trunk  
> revision
>
> Jacques
>
> From: "ian tabangay" <it...@gmail.com>
>> Hi. Im looking at a May release of Ofbiz and noticed that the Change
>> UserLogin Password does not check the current password of user. The  
>> form is
>> processed for as long as the New Password and New Password Verify  
>> Field has
>> been populated. Has this been fixed in the current release?
>> Ian
>>


Re: Change UserLogin Password Bug?

Posted by Jacques Le Roux <ja...@les7arts.com>.
Yes, there are been changes around that, please check last trunk revision

Jacques

From: "ian tabangay" <it...@gmail.com>
> Hi. Im looking at a May release of Ofbiz and noticed that the Change
> UserLogin Password does not check the current password of user. The form is
> processed for as long as the New Password and New Password Verify Field has
> been populated. Has this been fixed in the current release?
> 
> 
> Ian
>