BTW Piers, we use "fix committed" only when the fix has been merged onto
the final branch. While it's in review, we use "in progress".

** Changed in: mahara
       Status: Fix Committed => In Progress

** Changed in: mahara
   Importance: Undecided => Critical

** Changed in: mahara
    Milestone: None => 1.3.8

** Also affects: mahara/1.4
   Importance: Undecided
       Status: New

** Changed in: mahara/1.4
    Milestone: None => 1.4.2

** This bug has been flagged as a security vulnerability

** Changed in: mahara/1.4
       Status: New => Confirmed

** Changed in: mahara/1.4
   Importance: Undecided => High

** Changed in: mahara
   Importance: Critical => High

** Tags added: saml

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/932909

Title:
  auth/saml default remoteuser

Status in Mahara ePortfolio:
  In Progress
Status in Mahara 1.4 series:
  Confirmed

Bug description:
  The auth/saml plugin should have the option "Match username attribute
  to Remote username" defaulted to true, as this presents a risk in
  multi-tenanted Mahara instances (different institutions may clash on
  usernames so the default behaviour should be to match on the external
  one).

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/932909/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to     : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp

Reply via email to