[ 
https://issues.apache.org/jira/browse/OFBIZ-2799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12741281#action_12741281
 ] 

chris snow commented on OFBIZ-2799:
-----------------------------------

I'm aware of the ant target for setting up the admin user.

However, I think the principle should be extended to the demo data.  Why have 
demo data that is insecure by default?  I think only the admin login should be 
the only account enabled in the demo data, and the admin user be prompted to 
change the password on the first login.  

> security of demo data using default passwords
> ---------------------------------------------
>
>                 Key: OFBIZ-2799
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-2799
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>    Affects Versions: Release Branch 9.04
>            Reporter: chris snow
>
> After installing demo data should, admin user should be prompted to change 
> password on first log on.
> All other accounts with password of 'ofbiz' should be disabled.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to