Canonical SSO provider

Password change procedure does not ask for old password

Bug #805499 reported by Jonathan Davies
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Canonical SSO provider
Confirmed
Undecided
Unassigned

Bug Description

This came in via the SSO support form:

"The procedure to change the password does not ask for the old password. I think for increased security, the old password is needed to choose a new one."

Revision history for this message
Leo Arias (elopio) wrote :

I agree, the old password should be required.

Changed in canonical-identity-provider:
status: New → Confirmed
Revision history for this message
Leo Arias (elopio) wrote :

Can you please make public the bug this is a duplicate of?
So we can follow up its status.

thanks.

Revision history for this message
Stuart Metcalfe (stuartmetcalfe) wrote :

Done

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.