•  
      request #9801 Do not send full credentials in clear to the user when an user account is created by a site administrator
    Infos
    #9801
    Thomas Gerbet (tgerbet)
    2017-01-13 11:35
    2017-01-04 09:56
    10073
    Details
    Do not send full credentials in clear to the user when an user account is created by a site administrator
    Sending the credentials in clear by email is a bad practice. Even more than risking to compromise the account because the credentials are sent over an insecure media, it encourages the user to use his email account as a password manager (aka I will keep the email and copy/paste the password when I need it). Tuleap should not encourage such bad practices.
    Site admin
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2017-01-13
    Attachments
    Empty
    References

    Follow-ups

    User avatar
    Integrated into Tuleap 9.3.99.38

    • Status changed from Under review to Closed
    • Connected artifacts
    • Close date set to 2017-01-13