mahara-contributors team mailing list archive

[Hugh Davenport <1396564@xxxxxxxxxxxxxxxxxx>]

Hi,

Yeh, cli scripts are save enough. I mean while the command is running
any user on the system it is running on can see the arguments (and a
user could automatically scrape these), so the new password could be
leaked to users on the host system. Security on the web side shouldn't
be an issue as done directly with mahara codebase.

So yeh, save enough.

Cheers,

Hugh

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1396564

Title:
  Add password recovery with CLI

Status in Mahara ePortfolio:
  Opinion

Bug description:
  Moodle offers many services accessible by CLI in the admin/cli folder
  and also in individual modulename/cli folders.

  One of the cli service provides a way for admin to change user's
  password, which is very convenient to do it quickly for one user or
  for many users, with some unix programming.

  I would like  to suggest you to adding such a cli service into the
  admin/cli folder for Mahara.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1396564/+subscriptions