[
http://jira.codehaus.org/browse/MRM-1047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=170076#action_170076
]
Brett Porter commented on MRM-1047:
-----------------------------------
should also check for force password change in the above locations
> Archiva allows deployment by user with expired password
> -------------------------------------------------------
>
> Key: MRM-1047
> URL: http://jira.codehaus.org/browse/MRM-1047
> Project: Archiva
> Issue Type: Bug
> Components: Users/Security
> Affects Versions: 1.1.3
> Reporter: Wendy Smoak
> Assignee: Brett Porter
> Priority: Minor
> Fix For: 1.2-M2
>
>
> If a user has the repo manager role, he can still deploy artifacts even if
> his password is expired and/or flagged as must be changed.
> An expired password is no longer valid, and Archiva should prevent access to
> the repository until it is changed.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
