[syncope] branch master updated: [SYNCOPE-1563] Fixed password mangement in user approval form (#188)

[an...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

andreapatricelli pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/syncope.git


The following commit(s) were added to refs/heads/master by this push:
     new edae2ad  [SYNCOPE-1563] Fixed password mangement in user approval form (#188)
edae2ad is described below

commit edae2ad4de71fe5570f46abc089af34ef824a8b3
Author: Andrea Patricelli <an...@apache.org>
AuthorDate: Fri May 15 14:18:41 2020 +0200

    [SYNCOPE-1563] Fixed password mangement in user approval form (#188)
    
    * [SYNCOPE-1563] Do not initialize user approval form with the password taken from workflow
---
 .../syncope/client/console/panels/UserRequestFormDirectoryPanel.java  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java b/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
index 7fe3323..52956d2 100644
--- a/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
+++ b/ext/flowable/client-console/src/main/java/org/apache/syncope/client/console/panels/UserRequestFormDirectoryPanel.java
@@ -227,6 +227,10 @@ public class UserRequestFormDirectoryPanel
                 UserTO previousUserTO;
                 if (formTO.getUserUR() == null) {
                     newUserTO = formTO.getUserTO();
+                    if (newUserTO != null) {
+                        // SYNCOPE-1563 do not use the password into formTO.getUserTO()
+                        newUserTO.setPassword(null);
+                    }
                     previousUserTO = null;
                 } else if (formTO.getUserTO() == null) {
                     // make it stronger by handling possible NPE