** Changed in: mahara
    Milestone: None => 1.4.0

** Changed in: mahara
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Mahara
Core, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/692953

Title:
  XMLRPC automatic user creation and password recovery issue

Status in Mahara ePortfolio:
  Fix Released

Bug description:
  Something to think about. The use case is:

  1. Create user in moodle that would have the similar username and email to 
the one that already exists in Mahara (ensure "we auto-create the user" is set 
in XMLRPC settings). Say, we created user "test1".
  2. Login to Mahara from Moodle, the new user with amended username will be 
created (test11). At this point we have two different usernames with the same 
email in Mahara.
  3. Now, if original test1 forgot a password, (s)he will only be able to use 
username-based recovery in "Lost username/password", entering email will ends 
with error "The email address or username you entered doesn't match any users 
for this site".

  The easiest way is probably ensuring that password recovery can be
  requested for internal users only.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/692953/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~mahara-core
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~mahara-core
More help   : https://help.launchpad.net/ListHelp

Reply via email to