--- a/CHANGES.txt	Mon Aug 02 22:42:55 2004 +0000
+++ b/CHANGES.txt	Sat Aug 07 22:19:14 2004 +0000
@@ -7,6 +7,7 @@
 - fixed history display when "ascending"
 - removed references to py2.3+ boolean values (sf bug 995682)
 - fix static file path normalisation in security check (thanks David Linke)
+- less specific messages for login failures (thanks Chris Withers)
 
 2004-07-21 0.7.6
 Fixed:

--- a/doc/index.txt	Mon Aug 02 22:42:55 2004 +0000
+++ b/doc/index.txt	Sat Aug 07 22:19:14 2004 +0000
@@ -130,8 +130,8 @@
 Mike Thompson,
 Martin Uzak,
 Darryl VanDorp,
-J Vickroy.
-
+J Vickroy,
+Chris Withers.
 
 
 License

--- a/doc/installation.txt	Mon Aug 02 22:42:55 2004 +0000
+++ b/doc/installation.txt	Sat Aug 07 22:19:14 2004 +0000
@@ -472,9 +472,16 @@
 
      support:*:1002:jblaine,samh,geezer,mail,apache
 
-The tracker "db" directory should be chmod'ed g+sw so that the group can
-write to the database, and any new files created in the database will be owned
-by the group.
+After this change, you'll need to make sure you restart roundup-server,
+apache and any other long-running process associated with Roundup.  
+The tracker "db" directory permissions and owner information should be
+fixed with::
+
+   chmod g+sw db
+   chgrp support db
+   
+This allows the group to write to the database, and any new files
+created in the database will be owned by the group.
 
 If you're using the mysql or postgresql backend then you'll need to ensure
 that the tracker user has appropriate permissions to create/modify the

--- a/roundup/cgi/actions.py	Mon Aug 02 22:42:55 2004 +0000
+++ b/roundup/cgi/actions.py	Sat Aug 07 22:19:14 2004 +0000
@@ -1,4 +1,4 @@
-#$Id: actions.py,v 1.27.2.4 2004-07-20 02:10:43 richard Exp $
+#$Id: actions.py,v 1.27.2.5 2004-08-07 22:19:14 richard Exp $
 
 import re, cgi, StringIO, urllib, Cookie, time, random
 
@@ -801,14 +801,14 @@
             self.client.userid = self.db.user.lookup(self.client.user)
         except KeyError:
             name = self.client.user
-            self.client.error_message.append(_('No such user "%(name)s"')%locals())
+            self.client.error_message.append(_('Ivalid login'))
             self.client.make_user_anonymous()
             return
 
         # verify the password
         if not self.verifyPassword(self.client.userid, password):
             self.client.make_user_anonymous()
-            self.client.error_message.append(_('Incorrect password'))
+            self.client.error_message.append(_('Invalid login'))
             return
 
         # Determine whether the user has permission to log in.