Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-16852

Don't store cleartext user password for user invitation

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 6.0
    • Fix Version/s: 6.0-HF12, 7.3
    • Component/s: User Registration
    • Tags:
    • Sprint:
      TGV 7.2-5
    • Story Points:
      3

      Description

      The password provided by user in invitation form is stored in plain text in the database in the 'userinfo' table. We don't actually need to store it at all.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: