Uploaded image for project: 'Jira Service Desk Server and Data Center'
  1. Jira Service Desk Server and Data Center
  2. JSDSERVER-967

Service Desk does not respect JIRA password policy.

    XMLWordPrintable

    Details

      Description

      1. Add a password policy to JIRA.
      2. Create a user, add user as service desk customer.
      3. Log in with user via service desk portal.
      4. Change password to something that is not valid for policy.

      Expected result: if password does not respect policy, error should be displayed.
      Actual result: password is changed. No mention of JIRA password policy.

      In JIRA this is covered by:

      final Collection<WebErrorMessage> messages = passwordPolicyManager.checkPolicy(user, current, password);
                  if (!messages.isEmpty())
                  {
                      addError("password", getText("changepassword.new.password.rejected"));
                      for (WebErrorMessage message : messages)
                      {
                          passwordErrors.add(message);
                      }

      Is this also used in Service Desk?

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              mmcmahon Matthew McMahon
              Reporter:
              ilabras Ibrahim (Inactive)
              Votes:
              8 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: