https://bugzilla.wikimedia.org/show_bug.cgi?id=28328

--- Comment #8 from Brion Vibber <[email protected]> 2011-04-07 22:02:55 UTC 
---
In this case (no password set on creation, no auth plugin), the user has no way
to log in until a password has been set -- so they can't go to
Special:ResetPass etc.

The most common example of this case is user accounts created by another
logged-in user, with a new password reset code sent via email. Until they log
in with the reset code, they don't have a password and can't actually log in
directly.


If your extension is customizing authentication in order to log people in via
cookies, then it needs to implement the AuthPlugin interface -- it can then
tell the system that passwords don't make sense by returning false for its
allowPasswordChange method().

There may be a case where you could be logged in with no local password set,
but there is some way to reset local passwords, but offhand not sure.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to