mahara-contributors team mailing list archive

[Kristina Hoeppner <1191453@xxxxxxxxxxxxxxxxxx>]

https://reviews.mahara.org/#/c/2302
https://reviews.mahara.org/#/c/2303
https://reviews.mahara.org/#/c/2304

** Also affects: mahara/1.5
   Importance: Undecided
       Status: New

** Also affects: mahara/1.6
   Importance: Undecided
       Status: New

** Also affects: mahara/1.7
   Importance: Undecided
       Status: New

** Changed in: mahara/1.5
   Importance: Undecided => High

** Changed in: mahara/1.6
   Importance: Undecided => High

** Changed in: mahara/1.7
   Importance: Undecided => High

** Changed in: mahara/1.5
       Status: New => In Progress

** Changed in: mahara/1.6
       Status: New => In Progress

** Changed in: mahara/1.7
       Status: New => In Progress

** Changed in: mahara/1.5
     Assignee: (unassigned) => Kristina Hoeppner (kris-hoeppner)

** Changed in: mahara/1.6
     Assignee: (unassigned) => Kristina Hoeppner (kris-hoeppner)

** Changed in: mahara/1.7
     Assignee: (unassigned) => Kristina Hoeppner (kris-hoeppner)

** Changed in: mahara/1.5
    Milestone: None => 1.5.11

** Changed in: mahara/1.6
    Milestone: None => 1.6.6

** Changed in: mahara/1.7
    Milestone: None => 1.7.2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contrib members
https://bugs.launchpad.net/bugs/1191453

Title:
  Don't show password in cleartext

Status in Mahara ePortfolio:
  Fix Committed
Status in Mahara 1.5 series:
  In Progress
Status in Mahara 1.6 series:
  In Progress
Status in Mahara 1.7 series:
  In Progress

Bug description:
  When you are on admin/edit.php or admin/add.php, the password you
  enter for a user is displayed in cleartext. This is not good esp. when
  you have form filling turned on in your browser as it remembers the
  passwords that you typed in.

  The easiest solution is to make this field type "password" so that it
  is treated like a password field.

  More complicated would be to allow the admin to toggle between viewing
  the password or not (like in Moodle) or to implement a password
  confirmation (like on the account settings page).

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1191453/+subscriptions