[xwiki-users] 1.4.1 and resetting user passwords?
Hi, One small thing I notice is hat you have to go the the objects for resetting a user's password (ie, when you're not the user and you're changing it for them). Shouldn't this have an automatic temporary-password script behind it? Also, when setting a user's password manually through the objects, I get a big nasty database error.. followed by general odd behavior even if I recreate the account. Is that expected?
Joe wrote:
Hi,
One small thing I notice is hat you have to go the the objects for resetting a user's password (ie, when you're not the user and you're changing it for them). Shouldn't this have an automatic temporary-password script behind it?
Why? If the rights are correctly set, then only administrators should be able to change a user's password (except the user himself). If you're afraid that someone else could change a password he shouldn't be able to change, then either you didn't set the correct rights, or you made an admin somebody you don't trust.
Also, when setting a user's password manually through the objects, I get a big nasty database error.. followed by general odd behavior even if I recreate the account. Is that expected?
No, that should never happen, and I've never seen it. Can you give us the exception? -- Sergiu Dumitriu http://purl.org/net/sergiu/
Joe wrote:
Also, when setting a user's password manually through the objects, I get a big nasty database error.. followed by general odd behavior even if I recreate the account. Is that expected?
I just tried with a clean 1.4.1 and everything went OK, no exception. -- Sergiu Dumitriu http://purl.org/net/sergiu/
If the rights are correctly set That's just it. There is no method to simply reset the password - even as administrator, you have to go to the "Objects" view, and set a field value. I guess I could try it on a clean install though to confirm similar issue exists on clean.
On Fri, Jun 13, 2008 at 1:54 PM, Sergiu Dumitriu <[email protected]> wrote:
Joe wrote:
Hi,
One small thing I notice is hat you have to go the the objects for resetting a user's password (ie, when you're not the user and you're changing it for them). Shouldn't this have an automatic temporary-password script behind it?
Why? If the rights are correctly set, then only administrators should be able to change a user's password (except the user himself). If you're afraid that someone else could change a password he shouldn't be able to change, then either you didn't set the correct rights, or you made an admin somebody you don't trust.
Also, when setting a user's password manually through the objects, I get a big nasty database error.. followed by general odd behavior even if I recreate the account. Is that expected?
No, that should never happen, and I've never seen it. Can you give us the exception? -- Sergiu Dumitriu http://purl.org/net/sergiu/ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Joe wrote:
If the rights are correctly set That's just it. There is no method to simply reset the password - even as administrator, you have to go to the "Objects" view, and set a field value. I guess I could try it on a clean install though to confirm similar issue exists on clean.
Yes, we are aware of that since a long time. We just have more important bugs to take care of first. http://jira.xwiki.org/jira/browse/XWIKI-1730 -- Sergiu Dumitriu http://purl.org/net/sergiu/
participants (2)
-
Joe -
Sergiu Dumitriu