mahara-contributors team mailing list archive

[Robert Lyon <robertl@xxxxxxxxxxxxxxx>]

** Changed in: mahara/16.10
       Status: New => Fix Committed

** Changed in: mahara/17.04
       Status: New => Fix Committed

** Changed in: mahara/17.10
       Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1471103

Title:
  Make the password reset CLI script log out the user

Status in Mahara:
  Fix Committed
Status in Mahara 16.10 series:
  Fix Committed
Status in Mahara 17.04 series:
  Fix Committed
Status in Mahara 17.10 series:
  Fix Committed
Status in Mahara 18.04 series:
  Fix Committed

Bug description:
  In Bug 1396564 we added a command-line script for resetting Mahara
  passwords.

  Robert pointed out that this script should end any current sessions
  for the user. The idea is that, if their password needs to be reset
  because their account has been hacked, then we should kick out any
  remaining sessions that are logged-in, because the attacker could use
  those to re-reset their password.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1471103/+subscriptions