Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-1875

Update Forgotten Password workflow to Atlassian standard

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Fixed
    • 2.1
    • None
    • None

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      The forgotten password feature in Crowd should not send a password to the user.

      It should not generate a password at all.

      The aim will be to send a uniquely random URL to the user so they can choose themselves a new password. This will match the functionality currently seen in Confluence, JIRA and FishEye.

      Attachments

        Issue Links

          incorporates

          Bug - A problem which impairs or prevents the functions of the product. CWD-1897 Automatically generated passwords (e.g. password reset) use insecure java.util.Random

          • High - High priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-86 Anyone can reset anyone elses password

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-1014 Reset Password functionality does not consider directory password configuration

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-1551 crowd does not send passwords that meet the given password requirement

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-1676 Password-complexity regex is not enforced when setting a password using soap

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-362 Reset password error is not useful when regex is not passed.

          • Low - Low priority issues
          • Closed

          Suggestion - CWD-1189 Need to provide clearer user console messages for changing password

          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. CWD-86 Anyone can reset anyone elses password

          • Medium - Medium priority issues
          • Closed
          relates to

          Suggestion - CWD-2009 Update Admin Reset Password to Atlassian Standard

          • Closed

          Activity

            People

              Unassigned Unassigned
              doflynn David O'Flynn [Atlassian]
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: