Project

General

Profile

Actions
Copy link

Bug #27200

open

Add a global warning and alert banner in user management with unsafe hashes

Added by Clark ANDRIANASOLO 1 day ago. Updated about 24 hours ago.

Status:
Pending technical review
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Web - UI & UX
Target version:
8.2.8
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
First impressions of Rudder
Effort required:
Small
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

When allowing unsafe hashes for user passwords (unsafe-hashes="true" added in #24729), users are able to login with SHA/MD5.
But since #27128 those hashes are no longer supported (in upcoming 9.0 version).

So we need a visible alert banner in the user management page when the option is still enabled, and a warning in the "User management" menu

Related issues 2 (1 open — 1 closed)

Related to Rudder - Architecture #24729: Allow using a different password hash algorithm for each local userReleasedAlexis MoussetActions
Related to Rudder - Architecture #27128: Drop support for legacy password hash algorithmsPending releaseFrançois ARMANDActions
Actions
Copy link

Also available in: Atom PDF