Make the password reset CLI script log out the user
Bug #1471103 reported by
Aaron Wells
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Fix Released
|
Medium
|
Robert Lyon | ||
16.10 |
Fix Released
|
Medium
|
Unassigned | ||
17.04 |
Fix Released
|
Medium
|
Unassigned | ||
17.10 |
Fix Released
|
Medium
|
Unassigned | ||
18.04 |
Fix Released
|
Medium
|
Robert Lyon |
Bug Description
In Bug 1396564 we added a command-line script for resetting Mahara passwords.
Robert pointed out that this script should end any current sessions for the user. The idea is that, if their password needs to be reset because their account has been hacked, then we should kick out any remaining sessions that are logged-in, because the attacker could use those to re-reset their password.
no longer affects: | mahara/15.10 |
no longer affects: | mahara/16.04 |
Changed in mahara: | |
milestone: | 15.10.1 → 16.10.0 |
Changed in mahara: | |
assignee: | nobody → Aaron Wells (u-aaronw) |
Changed in mahara: | |
milestone: | 16.10.0 → 16.10.1 |
Changed in mahara: | |
milestone: | 16.10.1 → 17.04.0 |
Changed in mahara: | |
status: | In Progress → Confirmed |
milestone: | 17.04.0 → 17.10.0 |
importance: | Low → Medium |
assignee: | Aaron Wells (u-aaronw) → nobody |
Changed in mahara: | |
milestone: | 17.10.0 → 18.04.0 |
Changed in mahara: | |
assignee: | nobody → Robert Lyon (robertl-9) |
Changed in mahara: | |
status: | Confirmed → In Progress |
Changed in mahara: | |
status: | In Progress → Fix Committed |
To post a comment you must log in.
Patch for master: https:/ /reviews. mahara. org/#/c/ 4916/