Reviewed:  https://reviews.mahara.org/7787
Committed: 
https://git.mahara.org/mahara/mahara/commit/e73331901ea8f6527ebc4cdda86285ef6325f285
Submitter: Robert Lyon (robe...@catalyst.net.nz)
Branch:    17.04_STABLE

commit e73331901ea8f6527ebc4cdda86285ef6325f285
Author: Robert Lyon <robe...@catalyst.net.nz>
Date:   Tue May 23 14:12:50 2017 +1200

Bug 1692749: Security: Stop event log having plain text passwords

This patch only deals with:
1) removing passwords from existing event_log table data
2) stopping the recording of passwords into the event_log table
3) sets the reset password on next login for those users

It doesn't deal with removing the unnecessary cruft information
that will be handled by the bug 1692385

behatnotneeded

Change-Id: Id29148f78fa6918f5f5afcb89d211ccb3b60c95b
Signed-off-by: Robert Lyon <robe...@catalyst.net.nz>

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask 
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1692385

Title:
  Adjust the event_log table to facilitate logging of more chronological
  information

Status in Mahara:
  In Progress

Bug description:
  Currently for a number of things we only record the creation time
  (ctime) and last time they were interacted with (mtime). For views we
  also record last accessed time (atime).

  It would be better if we recorded the changes over time for things.

  So will add some _logging tables to record this info

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1692385/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to     : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp

Reply via email to