MantisBT - ATutor
View Issue Details
0004684ATutorAdminpublic2011-01-11 09:102011-08-29 14:11
greg 
greg 
normalminoralways
closedfixed 
 
2.0.3 
SVN
#
0004684: admin create user password
When an admin creates a new user account, the confirmation message does not have a password etc. thus users are unable to login.
No tags attached.
Issue History
2011-01-11 09:10gregNew Issue
2011-01-11 09:10gregAffects version => SVN
2011-01-11 09:28IndieRectNote Added: 0004875
2011-01-11 10:09harrisNote Added: 0004876
2011-07-18 16:32gregAssigned To => greg
2011-07-18 16:32gregStatusnew => assigned
2011-08-23 14:23gregSVN Revision# => #
2011-08-23 14:23gregNote Added: 0005211
2011-08-23 14:23gregStatusassigned => resolved
2011-08-23 14:23gregFixed in Version => 2.0.3
2011-08-23 14:23gregResolutionopen => fixed
2011-08-29 14:11gregNote Added: 0005283
2011-08-29 14:11gregStatusresolved => closed

Notes
(0004875)
IndieRect   
2011-01-11 09:28   
On the other hand, sending passwords over the net is unsafe.

One possible solution is sending them anyway, but then forcing users to change them upon the first login.

Another solution: create a user with an empty password, send him/her a link with a random one-time token, then after following the link show a form asking for a new password.
(0004876)
harris   
2011-01-11 10:09   
+1 one-time token URL, prompt for new password upon first login.
(0005211)
greg   
2011-08-23 14:23   
Updated the language, to instruct new users to follow the link and click on "forgot your password" to set a password.
(0005283)
greg   
2011-08-29 14:11   
2.0.3 bugs resolved and closed round 2