Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-42097

can_change_password() set to false should not display the password form input during update

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. Enable web-service authentication plugin
      2. Create a new user with authentication set to "web-service authentication"
      3. Make sure the "passoword" field is disabled. Change the drop down to something else, like 'manual' . Make sure now the password field is enabled.
      4. Run behat tests for tag core_user.
      Show
      Enable web-service authentication plugin Create a new user with authentication set to "web-service authentication" Make sure the "passoword" field is disabled. Change the drop down to something else, like 'manual' . Make sure now the password field is enabled. Run behat tests for tag core_user.
    • Affected Branches:
      MOODLE_26_STABLE
    • Fixed Branches:
      MOODLE_27_STABLE
    • Pull Master Branch:
      MDL-42097-master
    • Story Points:
      8
    • Sprint:
      BACKEND Sprint 7

      Description

      Enable web service authentication plugin
      Create a new user set to ws auth method
      Try to change the password => no error. However the password change didn't occur because can_change_password() is set to false.

      We should not display the password field if the authentication method doesn't support a change - or display a warning message. The administrator could be thinking he did change the password. This could be considered as security issue even thought it's going to be rare.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              ankit_frenz Ankit Agarwal
              Reporter:
              jerome Jérôme Mouneyrac
              Peer reviewer:
              Petr Skoda
              Integrator:
              Dan Poltawski
              Tester:
              Petr Skoda
              Participants:
              Component watchers:
              Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                12/May/14