Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-21386

JIRA CAPTCHA functionality will not work if seraph-config.xml is missing "elevatedsecurityguard" settings

XMLWordPrintable

    • 4.01
    • Severity 3 - Minor
    • Hide
      Atlassian Update – 16 November 2017

      Hi everyone,

      The issue has not collected enough votes, watches, comments or support cases during it's lifetime. In this sense overal interest in the reported problem is low.
      Jira team is focusing on bigger and more impactful issues at the moment and we are not likely to look at the current bug soon. Therefore I'm resolving the issue as Timed Out.

      Atlassian will continue to watch issue for the further updates, so please don't hesitate to share your feedback in the issue comments.

      Cheers,
      Ignat Alexeyenko
      Jira bugmaster.

      Show
      Atlassian Update – 16 November 2017 Hi everyone, The issue has not collected enough votes, watches, comments or support cases during it's lifetime. In this sense overal interest in the reported problem is low. Jira team is focusing on bigger and more impactful issues at the moment and we are not likely to look at the current bug soon. Therefore I'm resolving the issue as Timed Out . Atlassian will continue to watch issue for the further updates, so please don't hesitate to share your feedback in the issue comments. Cheers, Ignat Alexeyenko Jira bugmaster.

      Steps:
      1. If customer has a missing entry for "elevatedsecurityguard" in seraph-config.xml, they will get a not so visible message in log file.
      2. But if user go to "Administration" tab and try to enable "CAPTCHA", they can do it without any error message.

      Result:
      1. The functionality is superficially enabled and its not working in realty. The functionality is dependent on having following setting in seraph-config.xml file. If due to any reason the setting is missing, user will not get any error message while changing the CAPTCHA setting in Administration->General Configuration.

      <elevatedsecurityguard class="com.atlassian.jira.security.login.JiraElevatedSecurityGuard"/>

              Unassigned Unassigned
              vbharara Veenu Bharara (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: