[Dspace-devel] [DuraSpace JIRA] (DS-1642) Create new user process needs improvement

Thu, 29 Aug 2013 07:00:24 -0700

Mark H. Wood commented on Improvement DS-1642
I agree that the current process is strange. We should just send the forgot-password email to the new user, without asking the admin. to press a button. I can't think of any reason to not press the button, so why even have it?

But having the admin. create the password, or sending passwords through the mail, are poor security practice. Just email the new user a link to the forgot-password page. Then nobody else ever has to know the user's password, and no sensitive information goes through email in the clear.
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira 
------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to