Re: [xwiki-users] Email notifications and security

Hello, I encountered an annoying situation and am wondering what I should do... As I wanted to enable email notifications of page updates, I entered our SMTP server information in the wiki preferences page. As it's needed by our server, I also entered my personal account credentials to be able to connect to the smtp server. The password field not being a "password" type field, it means everyone with admin rights in the wiki can have my password, but I can live with that for now. To see if it works, I now watch the whole wiki. I changed my password, so I updated the page, and gracefully received my old and new password in the notification email, in the page diff ... As well as the other admin. My question is : does notification process check for pages rights, meaning that if anyone registered to watch the whole wiki, did he receive my password through his notification emails as I did, or does he only receive notifications for updates on page he has rights on ?

Thanks, Jeremie _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users