Change UserLogin Password Bug?

[ian tabangay]

Hi. Im looking at a May release of Ofbiz and noticed that the Change
UserLogin Password does not check the current password of user. The form is
processed for as long as the New Password and New Password Verify Field has
been populated. Has this been fixed in the current release?


Ian

[Jacques Le Roux]

Yes, there are been changes around that, please check last trunk revision

Jacques

From: "ian tabangay" <[hidden email]>
> Hi. Im looking at a May release of Ofbiz and noticed that the Change
> UserLogin Password does not check the current password of user. The form is
> processed for as long as the New Password and New Password Verify Field has
> been populated. Has this been fixed in the current release?
>
>
> Ian
>

[David E Jones]

I'm actually not aware of any changes related to that, but there could  
be.

Ian: what you're probably seeing is the behavior when you are logged  
in as an admin, in which case you can change other people's passwords  
(and your own) without knowing their current password.

Of course, that's a total guess because there was not sufficient  
detail in your question (no name of a screen or any information about  
what you did and expected to happen, and what actually happened).

-David


On Jun 27, 2008, at 1:07 AM, Jacques Le Roux wrote:

> Yes, there are been changes around that, please check last trunk  
> revision
>
> Jacques
>
> From: "ian tabangay" <[hidden email]>
>> Hi. Im looking at a May release of Ofbiz and noticed that the Change
>> UserLogin Password does not check the current password of user. The  
>> form is
>> processed for as long as the New Password and New Password Verify  
>> Field has
>> been populated. Has this been fixed in the current release?
>> Ian
>>

[Jacques Le Roux]

Yes, I did not check the code and was thinking it may be related to the recent encrypt changes. As you well explained David, there
are not enough information in the question.

Jacques

From: "David E Jones" <[hidden email]>

>
> I'm actually not aware of any changes related to that, but there could  be.
>
> Ian: what you're probably seeing is the behavior when you are logged  in as an admin, in which case you can change other people's
> passwords  (and your own) without knowing their current password.
>
> Of course, that's a total guess because there was not sufficient  detail in your question (no name of a screen or any information
> about  what you did and expected to happen, and what actually happened).
>
> -David
>
>
> On Jun 27, 2008, at 1:07 AM, Jacques Le Roux wrote:
>
>> Yes, there are been changes around that, please check last trunk  revision
>>
>> Jacques
>>
>> From: "ian tabangay" <[hidden email]>
>>> Hi. Im looking at a May release of Ofbiz and noticed that the Change
>>> UserLogin Password does not check the current password of user. The  form is
>>> processed for as long as the New Password and New Password Verify  Field has
>>> been populated. Has this been fixed in the current release?
>>> Ian
>>>
>

[ian tabangay]

Oh I see. yes I was using a user with admin permissions then. Thanks for
clarifying that.

Ian

On Sat, Jun 28, 2008 at 1:43 AM, Jacques Le Roux <
[hidden email]> wrote:

> Yes, I did not check the code and was thinking it may be related to the
> recent encrypt changes. As you well explained David, there are not enough
> information in the question.
>
> Jacques