https://bugzilla.wikimedia.org/show_bug.cgi?id=28244

           Summary: Require account e-mail address in order to mail a new
                    password
           Product: MediaWiki
           Version: wikimedia-deployment
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: Normal
         Component: User preferences
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


While the password is only sent to the authenticated e-mail, this creates quite
a hassle when someone attempts to gain access or cause trouble for the
end-user. I just experienced an issue where an account is tied to a bot
framework (similar to stewbot) and I have to go through all this mess changing
the e-mail/password, re-authenticating, and adjusting the bot config when all
this could have been avoided by the user not even knowing the account's e-mail
address in the first place.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to