Bug#556979: Acknowledgement (wiki.debian.org: cannot login)
On Wed, 2009-11-18 at 19:37 -0300, Felipe Sateler wrote:
> Frank Lin PIAT wrote:
> > On Wed, 2009-11-18 at 17:52 -0300, Felipe Sateler wrote:
> >> [..] it is wrong that it did let me change my password.
> >
> > This behavior is be design: Moinmoin send your password when you request
> > it. If you want to change your password, log into the wiki, then click
> > on settings, then Change password (!).
>
> Actually, it sends a token which I use to change my password.
>
> But I need to supply my username and e-mail address for that. And even
> though I provided the wrong username, it sent me an e-mail.
I've just checked and it's actually the behavior by design: "provide
your email address *or* username".
Do you think that this is a problem? (personally, I think it's the
sensible behavior, because people who lost their password may have
forgotten their username too)
Franklin
Reply to: