Mercurial > p > roundup > code
diff CHANGES.txt @ 6684:9ca5cbffa0c4
Switch off using blank passwords for login
There is now a config.ini setting [web] login_empty_passwords to
enable logins for users without a password set. By default it's off
and every user must have a password.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 23 May 2022 17:31:50 -0400 |
| parents | ab2ed11c021e |
| children | 994893cf3e1a |
line wrap: on
line diff
--- a/CHANGES.txt Sun May 22 20:36:36 2022 -0400 +++ b/CHANGES.txt Mon May 23 17:31:50 2022 -0400 @@ -94,6 +94,9 @@ - issue2551205 - Add support for specifying valid origins for api: xmlrpc/rest. Allows CORS to work with roundup backend. (John Rouillard) +- new option added to config.ini: login_empty_passwords set to + no by default. Setting this to yes allows a user with an + empty password to login. Features: