Checking Email Duplication in the New Account creation step
Description
Attachments
- 04 Nov 2014, 01:56 AM
- 01 Oct 2014, 08:08 AM
- 28 May 2014, 12:59 AM
depends on
is depended on by
Activity
Hudson CI Server May 13, 2015 at 9:19 PM
SUCCESS: Integrated in sakai-10-java-1.7 #196 (See http://builds.sakaiproject.org:8080/job/sakai-10-java-1.7/196/)
https://sakaiproject.atlassian.net/browse/SAK-26158#icft=SAK-26158 10.x sakai-mock requires method checkDuplicatedEmail (enietzel@anisakai.com: rev 318823)
Valerio Cerni Conde February 26, 2015 at 3:46 AM
Tested successfully on sakai-trunk.atica.um.es Rev.38645 - 02-25-2015 06:37 - Sakai 11-SNAPSHOT (Kernel 11-SNAPSHOT)
Alexandre Ballesté Crevillén February 13, 2015 at 7:00 AM
I've adapted the patch 03 to git. But it's a security issue, and AFIK the last advise was not publishing it as PR. The question here is that this JIRA in my opinion is not a security concern, it's just a new feature.. My proposal is unset this JIRA of security and handle like a regular one.
Alaa Nizar January 8, 2015 at 3:34 PM
Hi all,
I applied the patch to both sakaic10.2 and sakai 10.3.
The code is working fine.
However, I modified the files manually, and rebuilt the corresponding tools. The patch command throws errors.
You can test it at http://sdns.coursar.com/
Yours,
Alaa
Alaa Nizar December 4, 2014 at 8:01 AM
Hi Alaxandre,
For the password reset functionality, it's working now. It was a missing value in sakai.properties (support.email)
I hope you looked at the sakai 10.2 patch.
Thanks
Using the "New Account" tool, users can create account without the checking of the email whether it exists or not.
This will have serious issues with the "Reset Password" tool.
If it's a small code to implement, that would be very helpful.
thank you