You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@syncope.apache.org by "Francesco Chicchiriccò (JIRA)" <ji...@apache.org> on 2013/12/04 16:35:37 UTC

[jira] [Resolved] (SYNCOPE-454) Update user without password specification involving resource with "Generate password if missing" enabled, sends password out anyway

     [ https://issues.apache.org/jira/browse/SYNCOPE-454?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Francesco Chicchiriccò resolved SYNCOPE-454.
--------------------------------------------

    Resolution: Fixed

> Update user without password specification involving resource with "Generate password if missing" enabled, sends password out anyway
> ------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SYNCOPE-454
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-454
>             Project: Syncope
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 1.1.5
>            Reporter: fabio martelli
>            Assignee: Francesco Chicchiriccò
>             Fix For: 1.1.6, 1.2.0
>
>
> Updating an existing user on an external resource with "Generate password if missing" enabled, without requiring password update explicitly, autogenerated password is sent by default.
> Of course, this is a WRONG behavior that can cause unexpected failures.



--
This message was sent by Atlassian JIRA
(v6.1#6144)