Return-Path: X-Original-To: apmail-allura-dev-archive@www.apache.org Delivered-To: apmail-allura-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 3A02317AF6 for ; Fri, 26 Sep 2014 16:34:56 +0000 (UTC) Received: (qmail 53639 invoked by uid 500); 26 Sep 2014 16:34:56 -0000 Delivered-To: apmail-allura-dev-archive@allura.apache.org Received: (qmail 53626 invoked by uid 500); 26 Sep 2014 16:34:56 -0000 Mailing-List: contact dev-help@allura.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@allura.apache.org Delivered-To: mailing list dev@allura.apache.org Received: (qmail 52474 invoked by uid 99); 26 Sep 2014 16:34:50 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Sep 2014 16:34:50 +0000 X-ASF-Spam-Status: No, hits=-0.1 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of noreply@sourceforge.net designates 216.34.181.60 as permitted sender) Received: from [216.34.181.60] (HELO smtp.ch3.sourceforge.com) (216.34.181.60) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Sep 2014 16:34:24 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.com; s=x; h=Date:References:In-Reply-To:Message-ID:Subject:Reply-To:From:To:MIME-Version:Content-Type; bh=hhTuxi0Q4ysNCJm5NpUJPyDJKcBrV5M8QArMx31PSCg=; b=SotVaD2V14AQ2IqTu18aBqFDBQct4fbP8i/tauSzZ+NbLlPuZNYKUCYfI0W31Mk6MPAF+B6OmcD88YR//iRESFDpVxrjE5XkK0yNFMXurGZBrhXI4lvvOrfHJaXRhaYLB6sBgwLt0hRemH+C7nlFEXiPnNKIpkOIhIuDcJpq5Jg=; Received: from localhost ([127.0.0.1] helo=sfs-alluradaemon-2.v29.ch3.sourceforge.com) by sfs-alluradaemon-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1XXYTP-0003fU-9x for dev@allura.apache.org; Fri, 26 Sep 2014 16:34:23 +0000 Content-Type: multipart/related; boundary="===============0735614332687611580==" MIME-Version: 1.0 To: dev@allura.apache.org From: "Dave Brondsema" Reply-To: "[allura:tickets] " <7678@tickets.allura.p.re.sf.net> Subject: [allura:tickets] #7678 ini option to limit pwd reset to primary email address Message-ID:

In-Reply-To: <5410c0d924b0d910d193637a.tickets@allura.p.sourceforge.net> References: <5410c0d924b0d910d193637a.tickets@allura.p.sourceforge.net> Date: Fri, 26 Sep 2014 16:34:23 +0000 X-Virus-Checked: Checked by ClamAV on apache.org --===============0735614332687611580== Content-Type: multipart/alternative; boundary="===============4101444990561438310==" MIME-Version: 1.0 --===============4101444990561438310== MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit - **status**: code-review --> in-progress - **Comment**: * The text for sending to primary instead of the entered address, would be better as "If the given email address is on record, a password reset email has been sent to the account's primary email address." * If the setting is false, and you enter a non-existent email addr, you get an exception `'NoneType' object has no attribute 'get_pref'` * The test would be better if it asserts the email went to primary address. --- ** [tickets:#7678] ini option to limit pwd reset to primary email address** **Status:** in-progress **Milestone:** forge-oct-3 **Created:** Wed Sep 10, 2014 09:21 PM UTC by Dave Brondsema **Last Updated:** Fri Sep 26, 2014 02:41 AM UTC **Owner:** Alexander Luberg We should have a .ini config option to limit password resets to the primary email address of a user, rather than all verified email addresses. The "success" message 'A password reset email has been sent, if the given email address is on record in our system.' will have to be changed if the option is enabled. If so, message should be 'A password reset email has been sent, if the given email address is on record as a primary email address.' --- Sent from sourceforge.net because dev@allura.apache.org is subscribed to https://sourceforge.net/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list. --===============4101444990561438310== MIME-Version: 1.0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: 7bit
  • status: code-review --> in-progress

  • Comment:

  • The text for sending to primary instead of the entered address, would be better as "If the given email address is on record, a password reset email has been sent to the account's primary email address."

  • If the setting is false, and you enter a non-existent email addr, you get an exception 'NoneType' object has no attribute 'get_pref'
  • The test would be better if it asserts the email went to primary address.

[tickets:#7678] ini option to limit pwd reset to primary email address

Status: in-progress
Milestone: forge-oct-3
Created: Wed Sep 10, 2014 09:21 PM UTC by Dave Brondsema
Last Updated: Fri Sep 26, 2014 02:41 AM UTC
Owner: Alexander Luberg

We should have a .ini config option to limit password resets to the primary email address of a user, rather than all verified email addresses.

The "success" message 'A password reset email has been sent, if the given email address is on record in our system.' will have to be changed if the option is enabled. If so, message should be 'A password reset email has been sent, if the given email address is on record as a primary email address.'

Sent from sourceforge.net because dev@allura.apache.org is subscribed to https://sourceforge.net/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.

--===============4101444990561438310==-- --===============0735614332687611580==--