On Wed, 2009-11-18 at 19:37 -0300, Felipe Sateler wrote: > Frank Lin PIAT wrote: > > On Wed, 2009-11-18 at 17:52 -0300, Felipe Sateler wrote: > >> [..] it is wrong that it did let me change my password. > > > > This behavior is be design: Moinmoin send your password when you request > > it. If you want to change your password, log into the wiki, then click > > on settings, then Change password (!). > > Actually, it sends a token which I use to change my password. > > But I need to supply my username and e-mail address for that. And even > though I provided the wrong username, it sent me an e-mail.
I've just checked and it's actually the behavior by design: "provide your email address *or* username". Do you think that this is a problem? (personally, I think it's the sensible behavior, because people who lost their password may have forgotten their username too) Franklin -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

