comparison roundup/configuration.py @ 6684:9ca5cbffa0c4

Switch off using blank passwords for login There is now a config.ini setting [web] login_empty_passwords to enable logins for users without a password set. By default it's off and every user must have a password.
author John Rouillard <rouilj@ieee.org>
date Mon, 23 May 2022 17:31:50 -0400
parents 0b8d34b64930
children f1f2d59dab8b
comparison
equal deleted inserted replaced
6683:12c5ddf865b1 6684:9ca5cbffa0c4
1258 "Set this option to 'no' if you want to ignore it."), 1258 "Set this option to 'no' if you want to ignore it."),
1259 (BooleanOption, "debug", "no", 1259 (BooleanOption, "debug", "no",
1260 "Setting this option makes Roundup display error tracebacks\n" 1260 "Setting this option makes Roundup display error tracebacks\n"
1261 "in the user's browser rather than emailing them to the\n" 1261 "in the user's browser rather than emailing them to the\n"
1262 "tracker admin."), 1262 "tracker admin."),
1263 (BooleanOption, "login_empty_passwords", "no",
1264 "Setting this option to yes/true allows users with an empty/blank\n"
1265 "password to login to the web/http interfaces."),
1263 (BooleanOption, "migrate_passwords", "yes", 1266 (BooleanOption, "migrate_passwords", "yes",
1264 "Setting this option makes Roundup migrate passwords with\n" 1267 "Setting this option makes Roundup migrate passwords with\n"
1265 "an insecure password-scheme to a more secure scheme\n" 1268 "an insecure password-scheme to a more secure scheme\n"
1266 "when the user logs in via the web-interface."), 1269 "when the user logs in via the web-interface."),
1267 (SecretMandatoryOption, "secret_key", create_token(), 1270 (SecretMandatoryOption, "secret_key", create_token(),

Roundup Issue Tracker: http://roundup-tracker.org/