https://bugzilla.wikimedia.org/show_bug.cgi?id=57289
T. Gries <m...@tgries.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|normal |major
--- Comment #6 from T. Gries <m...@tgries.de> ---
(In reply to comment #5)
> Is this still happening? I'm not able to reproduce it. Just to confirm,
>
> * I enter my username and temp password, click login
> * I get the change password form. I'm not logged in. Old password is
> pre-filled.
> * I enter in a new password (twice), and click submit.
> * I'm taken back to Main_Page, and I'm logged in.
>
> Am I missing a step?
Yes, certainly.
I still can reproduce my findings as in the first comment, and as confirmed by
André in https://bugzilla.wikimedia.org/show_bug.cgi?id=57289#c3
Please reproduce step-by-step:
Scenario:
+ en.wikipedia.org as of 2013-11-22
+ go to "Reset Password" page and trigger the I-forgot-my-passwort
e-mail-password mail
+ come back to the login page
+ enter the temporary password
+ you are now correctly asked to change your password (=mandatory password
change after login with temporary password)
+ after a successful password change you will see
"Change Password" (=page title)
"You must be logged in to access this page directly."
URL is:
"https://en.wikipedia.org/w/index.php?title=Special:ChangePassword&returnto=&returntoquery=&fromhttp=1";
This is *strictly* reproducible. Raising severity to "major" because it relates
to a password issue, which could point to critical bug.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
