mahara-contributors team mailing list archive

[Kristina Hoeppner <1766041@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Reported at https://mahara.org/interaction/forum/topic.php?id=8232

When the password policy is set to just upper and lowercase characters
and a minimum of 8 letters, the following password is accepted even
though it doesn't contain an uppercase letter:

maggie12

It seems that uppercase letters are ignored in all scenarios for the
password policy and a password is created when they are absent.

** Affects: mahara
     Importance: High
         Status: Confirmed

** Affects: mahara/18.04
     Importance: High
         Status: Confirmed

** Affects: mahara/18.10
     Importance: High
         Status: Confirmed

** Also affects: mahara/18.04
   Importance: Undecided
       Status: New

** Also affects: mahara/18.10
   Importance: Undecided
       Status: New

** Changed in: mahara/18.04
       Status: New => Confirmed

** Changed in: mahara/18.10
       Status: New => Confirmed

** Changed in: mahara/18.04
   Importance: Undecided => High

** Changed in: mahara/18.10
   Importance: Undecided => High

** Changed in: mahara/18.04
    Milestone: None => 18.04.1

** Changed in: mahara/18.10
    Milestone: None => 18.10.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1766041

Title:
  Password policy setting for only upper and lowercase letters doesn't
  require uppercase

Status in Mahara:
  Confirmed
Status in Mahara 18.04 series:
  Confirmed
Status in Mahara 18.10 series:
  Confirmed

Bug description:
  Reported at https://mahara.org/interaction/forum/topic.php?id=8232

  When the password policy is set to just upper and lowercase characters
  and a minimum of 8 letters, the following password is accepted even
  though it doesn't contain an uppercase letter:

  maggie12

  It seems that uppercase letters are ignored in all scenarios for the
  password policy and a password is created when they are absent.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1766041/+subscriptions