Thanks for the patch. Will test it out and check in if valid > Will there be a release soon ?
Yes. I apologize for the delays. The 2.2.3 (Java 6 maintenance) is ready. The 2.3.0 is pretty close to ready. I just found a few more bugs I'd like to fix this week. We are still considering adding 2 major features to 2.3.0, but that could realistically wait until a 2.3.1 release. If anyone is waiting (like yourself) on a 2.3.0 release, my vote is we release soon. I should have time to do a release at the end of this month. Let me discuss with developers on -dev list and see if anyone else has outstanding feature work On Mon, Dec 15, 2014 at 1:57 AM, Martin Maidhof <[email protected]> wrote: > > Hi, > > in our portal a new created user has to confirm it's password via email. > So we set the password to NOT enabled after user creation: > > User user = userManager.getUser(userName); > PasswordCredential pwc = userManager.getPasswordCredential(user); > pwc.setEnabled(false); > userManager.storePasswordCredential(pwc); > > But the user can immediately log in, although the password is disabled. > I verified this in the database (security_credential.IS_ENABLED = 0). > > The bug seems to be in the > UserPasswordCredentialManagerImpl.getAuthenticatedPasswordCredential > where isEnabled() is never checked ! > > I attached a patch to resolve this problem. > Please verify. > > Further we're looking forward to the Jetspeed 2.3 release, to use this one > in our next portal release (in december/january). > Currently we're using the trunk. > Will there be a release soon ? > > best regards, > Martin > > -- > > . frankfurt am main, 4°c, die gefühlte temperatur > liegt bei 0°c. zur zeit ein wenig bewölkt in 61 m. > die sichtweite reicht 8.0 km. > > < martin maidhof > [email protected] > t +49 69 759003 14 > > wemove digital solutions gmbh > eschersheimer landstr. 5-7 > 60322 frankfurt am main > > amtsgericht frankfurt am main, hrb 53992 > geschäftsführer joachim müller, stefan hartmann > > wemove digital solutions > www.wemove.com > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] >
