Bug #16296
closed
Updating informations by submitting empty fields invalidates user's loggin
Added by Elaad FURREEDAN almost 5 years ago.
Updated over 4 years ago.
Description
When I try to update informations by submitting empty field(s) in input boxes, invalidate informations : It replace and update in file the empty field by the correspondig field from admin informations
Exemple :
Initial state
Username : admin
Password : passadmin
roles : administrator
Username : toto
Password : 123badpasswd
roles : inventory
-> update user "toto" : change username "toto" to "titi" and keep password empty
Final state :
Username : admin
Password : passadmin
roles : administrator
Username : titi
Password : passadmin <------- ERROR
roles : inventory
- Target version set to 6.0-1.4
- Status changed from New to In progress
- Assignee set to Elaad FURREEDAN
- Target version changed from 6.0-1.4 to 6.0-1.5
- Target version changed from 6.0-1.5 to 6.0-1.6
The bug comes when we save authentification informations, in Firefox in my case. When we add an user, the two inputs fields was autofilled with Firefox's autocompletion for logins. The user will overwrites the autocompleted fields and will be created successfully. But when he try to update his username or password in the right menu, if he leaves an empty field, the autocompletion overwrite it, so the user will have an username or password swaped (according on which input he left empty) with the saved loggin in Firefox on this URL.
- Status changed from In progress to Pending technical review
- Assignee changed from Elaad FURREEDAN to Vincent MEMBRÉ
- Pull Request set to https://github.com/Normation/rudder-plugins/pull/224
- Status changed from Pending technical review to Pending release
- Status changed from Pending release to Released
This bug has been fixed in Rudder 6.0-1.6 which was released today.
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by Anonymous