Details
-
Type:
Improvement
-
Status: Closed
-
Priority:
Blocker
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 4.0.0-b1
-
Component/s: None
-
Labels:None
Description
Blesta supports the legacy use of logging in via user ID. The user ID is not shown in v3+, and so is not likely to be used, and has been deprecated as of v3.5.0-b5.
Allowing login via user ID poses a problem as described in CORE-1700, where a numeric username may match multiple records, thus making the selection of the 'correct' user arbitrary.
Users::auth needs to be updated to remove authentication of a user by `users`.`id`.
Activity
Tyson Phillips (Inactive)
created issue -
Cody Phillips (Inactive)
made changes -
| Field | Original Value | New Value |
|---|---|---|
| Assignee | Cody Phillips [ cody ] | Tyson Phillips [ tyson ] |
Cody Phillips (Inactive)
made changes -
| Sprint | 4.0.0 Sprint 1 [ 19 ] |
Cody Phillips (Inactive)
made changes -
| Rank | Ranked lower |
Cody Phillips (Inactive)
made changes -
| Issue Type | Task [ 3 ] | Improvement [ 4 ] |
Cody Phillips (Inactive)
made changes -
| Story Points | 1 |
Tyson Phillips (Inactive)
made changes -
| Status | Open [ 1 ] | Resolved [ 5 ] |
| Resolution | Fixed [ 1 ] |
Tyson Phillips (Inactive)
made changes -
| Link | This issue relates to CORE-1897 [ CORE-1897 ] |
Tyson Phillips (Inactive)
made changes -
| Status | In Review [ 5 ] | Closed [ 6 ] |