Issue Details (XML | Word | Printable)

Key: CONTINUUM-736
Type: Bug Bug
Status: Closed Closed
Resolution: Won't Fix
Priority: Blocker Blocker
Assignee: Unassigned
Reporter: Joe Cool
Votes: 1
Watchers: 2
Operations

If you were logged in you would be able to see more operations.
Continuum

"Edit User" page resets password to the empty password - admin user no longer useable

Created: 26/Jun/06 07:32 AM   Updated: 09/Oct/06 10:42 AM   Resolved: 09/Oct/06 10:42 AM
Component/s: Web interface
Affects Version/s: 1.0.3
Fix Version/s: 1.1-alpha-1

Time Tracking:
Not Specified

Complexity: Intermediate


 Description  « Hide

Hello,

I changed in the user management section the real name for the continuum admin user. The form where I added the real name also presented the password field. Here the password field was empty - nevertheless the admin user had a password. After entering the new real name for admin and after hitting "submit" the real named changed - but the password also changed. I did not enter anything in the password text field ...

It seems that the new password is now blank. This is a serious issue, since the login page does not allow an empty password. So how do I reset the admin password to a known value?

Moreover I need a solution how to repair my continuum system.

Cheers,

Bernd



SATO, Tadayoshi added a comment - 04/Oct/06 08:05 AM

Hi,

I had the same problem above. In edit user page, I updated user with empty password and after that I couldn't log in the continuum web page!

I think it's a defect that password validation is absent in edit user page. The error doesn't occur if the page prohibits submitting an empty password.

Thanks,

Tadayoshi


Jesse McConnell added a comment - 09/Oct/06 10:42 AM

the entire web interface and security model are being changed under continuum 1.1 so this issue is not really applicable to the trunk, and the user management pages for these activities are managed by the plexus-security integration

sorry about that, going through issues now to update and start preparing for 1.1 release