Skip to content
This repository has been archived by the owner on Apr 10, 2023. It is now read-only.

Add userid information in reset mail #6

Merged
merged 3 commits into from
Feb 9, 2015
Merged

Conversation

sgeulette
Copy link
Member

This is useful when an administrator resets a user password for a people having multiple accounts on a site.

@jean
Copy link
Member

jean commented Jan 22, 2015

I've also wondered "what was my userid again?", but I thought that requiring the user to remember the userid was a security measure ..

@sgeulette
Copy link
Member Author

Maybe a better implementation would be to include the userid only when the reset is done by a manager...

@sgeulette
Copy link
Member Author

Removed too wrong statement in mail when a manager has reset a password: the old password doesn't work anymore.

@sgeulette
Copy link
Member Author

What do you think about that ? @timo @tomgross @gotcha

@jfroche
Copy link
Member

jfroche commented Jan 28, 2015

Ok for me. @tisto what do you think ?

@gotcha
Copy link
Member

gotcha commented Jan 28, 2015

Fine for me as well. We might also want the advice from members of the security team @davisagli @vangheem

@sgeulette
Copy link
Member Author

Hi @davisagli @vangheem @tisto,
can you agree (or not) with this pull request that gives correct information when a manager resets a password ?
Needed to with Products.PasswordStrength 4.3 branch...
Thanks in advance

@vangheem
Copy link
Member

vangheem commented Feb 9, 2015

Looks good. That problem was annoying.

vangheem added a commit that referenced this pull request Feb 9, 2015
Add userid information in reset mail
@vangheem vangheem merged commit 506c6c3 into plone:master Feb 9, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants