BTW Piers, we use "fix committed" only when the fix has been merged onto
the final branch. While it's in review, we use "in progress".
** Changed in: mahara
Status: Fix Committed => In Progress
** Changed in: mahara
Importance: Undecided => Critical
** Changed in: mahara
Milestone: None => 1.3.8
** Also affects: mahara/1.4
Importance: Undecided
Status: New
** Changed in: mahara/1.4
Milestone: None => 1.4.2
** This bug has been flagged as a security vulnerability
** Changed in: mahara/1.4
Status: New => Confirmed
** Changed in: mahara/1.4
Importance: Undecided => High
** Changed in: mahara
Importance: Critical => High
** Tags added: saml
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/932909
Title:
auth/saml default remoteuser
Status in Mahara ePortfolio:
In Progress
Status in Mahara 1.4 series:
Confirmed
Bug description:
The auth/saml plugin should have the option "Match username attribute
to Remote username" defaulted to true, as this presents a risk in
multi-tenanted Mahara instances (different institutions may clash on
usernames so the default behaviour should be to match on the external
one).
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/932909/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
