[ https://issues.apache.org/jira/browse/OFBIZ-2799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12741281#action_12741281 ]
chris snow commented on OFBIZ-2799: ----------------------------------- I'm aware of the ant target for setting up the admin user. However, I think the principle should be extended to the demo data. Why have demo data that is insecure by default? I think only the admin login should be the only account enabled in the demo data, and the admin user be prompted to change the password on the first login. > security of demo data using default passwords > --------------------------------------------- > > Key: OFBIZ-2799 > URL: https://issues.apache.org/jira/browse/OFBIZ-2799 > Project: OFBiz > Issue Type: Bug > Components: framework > Affects Versions: Release Branch 9.04 > Reporter: chris snow > > After installing demo data should, admin user should be prompted to change > password on first log on. > All other accounts with password of 'ofbiz' should be disabled. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.