Mailing-List: contact jspwiki-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: jspwiki-dev@incubator.apache.org
Message-ID: <1099160628.1218374864885.JavaMail.jira@brutus>
Date: Sun, 10 Aug 2008 06:27:44 -0700 (PDT)
From: "Harry Metske (JIRA)" <jira@apache.org>
To: jspwiki-dev@incubator.apache.org
Subject: [jira] Resolved: (JSPWIKI-45) Password change process should
 require old password
In-Reply-To: <18670880.1195410882996.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/JSPWIKI-45?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Harry Metske resolved JSPWIKI-45.
---------------------------------

    Resolution: Duplicate

as earlier noted, it is a duplicate of JSPWIKI-79

> Password change process should require old password
> ---------------------------------------------------
>
>                 Key: JSPWIKI-45
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-45
>             Project: JSPWiki
>          Issue Type: Improvement
>          Components: Authentication&Authorization
>    Affects Versions: 2.4.104, 2.5.139-beta, 2.6.0
>            Reporter: Janne Jalkanen
>             Fix For: 3.0
>
>
> UserProfile.jsp does not require you to type in your old password to change the new password.  This can be a problem if you inadvertently leave your computer open and someone gains access to it.
> I think the old password should probably be required to change the email address as well, or else it could be used to restore the backend.
> (From Ounce)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.