Re: [GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[Derek Atkins]

For what it's worth, my next reset will include all bugs and users. So this 
won't be an issue.


But I agree it's not a bug that it says it sent an email when none was sent.

-derek
Sent using my mobile device. Please excuse any typos.
On May 15, 2018 9:39:38 PM Adrien Monteleone 
 wrote:



Perhaps a bug, perhaps a feature. You’d have to check with the BZ devs.

I’ve seen some site security recommendations to NOT show a different message.

Personally, I doubt it really discourages hackers or makes their task 
harder and it just frustrates a user who isn’t sure what address he/she 
signed up with.


Regards,
Adrien

On May 15, 2018, at 3:55 PM, Frank H. Ellenberger 
 wrote:


At first, IMHO there is a bg in bugzilla:
"A token for changing your password has been emailed to
frank.h.ellenber...@gmail.com. Follow the instructions in that email to
change your password."
But there is no email. If the user is not in the database the message
should be different.
Or an email should be sent "Sorry, I don't know you..."

Creating a new account with a different address works. Email gets sent.

Am 15.05.2018 um 20:35 schrieb Derek Atkins:
:
___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel




___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel




___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel

Re: [GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[Adrien Monteleone]

Perhaps a bug, perhaps a feature. You’d have to check with the BZ devs.

I’ve seen some site security recommendations to NOT show a different message.

Personally, I doubt it really discourages hackers or makes their task harder 
and it just frustrates a user who isn’t sure what address he/she signed up with.

Regards,
Adrien

> On May 15, 2018, at 3:55 PM, Frank H. Ellenberger 
>  wrote:
> 
> At first, IMHO there is a bg in bugzilla:
> "A token for changing your password has been emailed to
> frank.h.ellenber...@gmail.com. Follow the instructions in that email to
> change your password."
> But there is no email. If the user is not in the database the message
> should be different.
> Or an email should be sent "Sorry, I don't know you..."
> 
> Creating a new account with a different address works. Email gets sent.
> 
> Am 15.05.2018 um 20:35 schrieb Derek Atkins:
> :
> ___
> gnucash-devel mailing list
> gnucash-devel@gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
> 


___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel

Re: [GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[Frank H. Ellenberger]

Am 15.05.2018 um 23:06 schrieb John Ralls:
> 
> 
>> On May 15, 2018, at 1:55 PM, Frank H. Ellenberger 
>>  wrote:
>>
>> At first, IMHO there is a bg in bugzilla:
>> "A token for changing your password has been emailed to
>> frank.h.ellenber...@gmail.com. Follow the instructions in that email to
>> change your password."
>> But there is no email. If the user is not in the database the message
>> should be different.
>> Or an email should be sent "Sorry, I don't know you..."
>>
>> Creating a new account with a different address works. Email gets sent.
> 
> Since frank.h.ellenber...@gmail.com doesn't seem to be in the user table yet, 
> creating a new account with that address should work. Did it not?
> 
> Regards,
> John Ralls

For first tests, I use my private address.

I was probably wrong thinking: If I am not in the user base, I will also
not be in the developer group.

So I can currently not test the real interesting views and actions.

~Frank

___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel

Re: [GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[John Ralls]

> On May 15, 2018, at 1:55 PM, Frank H. Ellenberger 
>  wrote:
> 
> At first, IMHO there is a bg in bugzilla:
> "A token for changing your password has been emailed to
> frank.h.ellenber...@gmail.com. Follow the instructions in that email to
> change your password."
> But there is no email. If the user is not in the database the message
> should be different.
> Or an email should be sent "Sorry, I don't know you..."
> 
> Creating a new account with a different address works. Email gets sent.

Since frank.h.ellenber...@gmail.com doesn't seem to be in the user table yet, 
creating a new account with that address should work. Did it not?

Regards,
John Ralls


___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel

[GNC-dev] BZ-emails; was: Bugzilla Migration Status -- phase 2

[Frank H. Ellenberger]

At first, IMHO there is a bg in bugzilla:
"A token for changing your password has been emailed to
frank.h.ellenber...@gmail.com. Follow the instructions in that email to
change your password."
But there is no email. If the user is not in the database the message
should be different.
Or an email should be sent "Sorry, I don't know you..."

Creating a new account with a different address works. Email gets sent.

Am 15.05.2018 um 20:35 schrieb Derek Atkins:
:
___
gnucash-devel mailing list
gnucash-devel@gnucash.org
https://lists.gnucash.org/mailman/listinfo/gnucash-devel