Vote #76971
完了Prevent admins from sending themselves their own password
0%
説明
As an admin, when setting one's own password via @Users#edit@ instead of via the "proper form" at @My#password@, there should not be an option to send the password in plaintext to oneself.
IMO, the "send account information" option is made for cases where a new login/password need to be transmitted to another user after they have been set by the admin. When setting one's own password (even as admin), there should be no reason (or possibility) to send it via email.
The attached patch solves this issue.
journals
--------------------------------------------------------------------------------
Thanks.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
related_issues
relates,Closed,13197,Don't send password in plain text via email after registration
Admin Redmine さんが約4年前に更新
- カテゴリ を Accounts / authentication_7 にセット
- 対象バージョン を 3.2.1_112 にセット