mahara-contributors team mailing list archive

[Mahara Bot <1692385@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/7776
Committed: https://git.mahara.org/mahara/mahara/commit/433ab8e6d309a2174c5b523f3a6c354f14f61587
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch:    master

commit 433ab8e6d309a2174c5b523f3a6c354f14f61587
Author: Robert Lyon <robertl@xxxxxxxxxxxxxxx>
Date:   Tue May 23 14:12:50 2017 +1200

Bug 1692749: Security: Stop event log having plain text passwords

This patch only deals with:
1) removing passwords from existing event_log table data
2) stopping the recording of passwords into the event_log table
3) sets the reset password on next login for those users

It doesn't deal with removing the unnecessary cruft information
that will be handled by the bug 1692385

behatnotneeded

Change-Id: Id29148f78fa6918f5f5afcb89d211ccb3b60c95b
Signed-off-by: Robert Lyon <robertl@xxxxxxxxxxxxxxx>

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1692385

Title:
  Adjust the event_log table to facilitate logging of more chronological
  information

Status in Mahara:
  In Progress

Bug description:
  Currently for a number of things we only record the creation time
  (ctime) and last time they were interacted with (mtime). For views we
  also record last accessed time (atime).

  It would be better if we recorded the changes over time for things.

  So will add some _logging tables to record this info

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1692385/+subscriptions