Angela Schreiber created OAK-9245:
-------------------------------------
Summary: UserValidator.propertyChanged may miss plaintext password
Key: OAK-9245
URL: https://issues.apache.org/jira/browse/OAK-9245
Project: Jackrabbit Oak
Issue Type: Bug
Components: core, security
Reporter: Angela Schreiber
Assignee: Angela Schreiber
{{UserValidator.propertyChanged}} only verifies if the password property has
not been changed to plain-text if the nodestate _before_ the modification was a
user node. inserting a user by modifying the primary type of an non-user node,
would result in the pw constraint not being properly validated.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
