comparison roundup/cgi/actions.py @ 5253:2d61e39b89c8

Issue2550716 Email address displayed after password reset request (fix) Change the message displayed upon password reset using an account name to no longer expose the email address. Password reset triggered using an email address will still display the user supplied email address.
author John Rouillard <rouilj@ieee.org>
date Sat, 26 Aug 2017 20:27:08 -0400
parents 17b213eab274
children 3639f4b55936
comparison
equal deleted inserted replaced
5242:39c9f69c3f31 5253:2d61e39b89c8
974 You should then receive another email with the new password. 974 You should then receive another email with the new password.
975 '''%{'name': name, 'tracker': tracker_name, 'url': self.base, 'otk': otk} 975 '''%{'name': name, 'tracker': tracker_name, 'url': self.base, 'otk': otk}
976 if not self.client.standard_message([address], subject, body): 976 if not self.client.standard_message([address], subject, body):
977 return 977 return
978 978
979 self.client.add_ok_message(self._('Email sent to %s') % address) 979 if 'username' in self.form:
980 self.client.add_ok_message(self._('Email sent to primary notification address for %s.') % name)
981 else:
982 self.client.add_ok_message(self._('Email sent to %s.') % address)
980 983
981 class RegoCommon(Action): 984 class RegoCommon(Action):
982 def finishRego(self): 985 def finishRego(self):
983 # log the new user in 986 # log the new user in
984 self.client.userid = self.userid 987 self.client.userid = self.userid

Roundup Issue Tracker: http://roundup-tracker.org/