← Back to team overview

mahara-contributors team mailing list archive

[Bug 568804] Re: Updating user's Authentication Method

 

This still looks to be an issue: I can assign an auth method to a user
that shouldn't be allowed it.

Eg. I have 2 institutions 
- Institution A has internal auth only
- Institution B has internal auth and xmlrpc

A can have a user only in Institution A being allowed to have it's auth
set to xmlrpc

There either needs to be a check to stop invalid auth options being
assigned to a user or implement Hugh's idea that assigning a user with
the auth also assigns them to the institution.

The easier (and more sane from UI perspective) would be to alert admin that they are trying to assign an invalid auth type with a message something like:
 "you are trying to assign auth type to user from Institution X, which they do not belong to"

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/568804

Title:
  Updating user's Authentication Method

Status in Mahara ePortfolio:
  Confirmed

Bug description:
  I updated a user's auth method from 'No Institution' to 'AUTldap (AUT
  University)'. When I searched for the user name under Manage Users ->
  User Search, the user's record under the column of Institution was
  still showing 'No Institution'.  Although, the auth method information
  does show correctly on the Account settings page. The mahara version
  is 1.2.4.

  Here is Richard's reply to this issue: 
  The problem is with the user account settings page, which basically assumes that the admin knows what they're doing, and allows you to do silly things like giving a user an auth method from an institution that she/he doesn't belong to.

  We should add code to stop auth methods from other institutions from
  showing in the auth method dropdown

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/568804/+subscriptions


References