couple of things to remember 1) for creation of employees they like to use a password they will remember. 2) when sending a new customer notification it should come back to a link that lets them change the password. 3) products lets you define a default password. so add an option to have it auto created. there are a couple of places the hard coded passwords are.
Michael Jensen (JIRA) sent the following on 11/15/2007 10:52 AM: > [ > https://issues.apache.org/jira/browse/OFBIZ-1151?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12542844 > ] > > Michael Jensen commented on OFBIZ-1151: > --------------------------------------- > > Is anyone working on this already? > I'd like to help out with it. I'm kind of a hack w/ofbiz, so I'd need a > little direction/mentoring on how to create an acceptable patch for the > project. > > >> Passwords are not seeded >> ------------------------ >> >> Key: OFBIZ-1151 >> URL: https://issues.apache.org/jira/browse/OFBIZ-1151 >> Project: OFBiz >> Issue Type: Improvement >> Components: party >> Affects Versions: SVN trunk, Release Branch 4.0 >> Reporter: Wickersheimer Jeremy >> Assignee: Jacques Le Roux >> Priority: Minor >> >> Password are currently hashed but not seeded which may be a security issue. >
