Project

General

Profile

Actions

Task #926

closed

Ability not to change password for CzechIdM

Added by Petr Michal almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Ondřej Kopr
Category:
Password
Target version:
Start date:
01/23/2018
Due date:
% Done:

100%

Estimated time:
Owner:

Description

On current project, IdM manages accounts and passwords only for external access.
Problem is, that we want to use password-reset module for external password without using the same password in IdM since it is the internal system.

Agreed solution:
- new pub property for not-managing password for IdM and additional logic in IdM.
- not log-in user afters set of new password, if this property is TRUE.

Actions #2

Updated by Radek Tomiška almost 7 years ago

  • Target version deleted (Garnet (7.7.0))
Actions #3

Updated by Ondřej Kopr almost 7 years ago

  • Status changed from New to In Progress
Actions #4

Updated by Ondřej Kopr almost 7 years ago

  • Target version set to Hematite (8.0.0)
Actions #5

Updated by Ondřej Kopr almost 7 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Ondřej Kopr to Radek Tomiška
  • Target version changed from Hematite (8.0.0) to Garnet (7.8.0)
  • % Done changed from 0 to 90

I created new configuration attribute:

idm.pub.core.identity.passwordChange.idm.enabled

this attribute allow or disallow change password for idm. Main logic for this feature is in IdentityPasswordProcessor. I added new warning message to FE component for password change. The warning message is shown when user hasn't accounts where can change password. Test are included. By default is password change for IdM allowed.

When change password from public site and password change is disallowed for idm, user will not be logged in IdM.

commit: https://github.com/bcvsolutions/CzechIdMng/commit/51b9c74eb382b4e9fd82fd326ab41aa0e8f5930c (develop)
documentation missing, because doesn't exists new version of documentation.

Radek could you make a review? Thank you.

Actions #6

Updated by Ondřej Kopr almost 7 years ago

Actions #7

Updated by Radek Tomiška almost 7 years ago

  • Status changed from Needs feedback to In Progress
  • Assignee changed from Radek Tomiška to Ondřej Kopr

I did test and review and changed behavior - new property is used on public password change only, commit:
https://github.com/bcvsolutions/CzechIdMng/commit/3740ab89e08bd9a823564b2986dfee3094778d6a

Thx for this new feature, add pls note about configuration property into documentation.

Actions #8

Updated by Ondřej Kopr almost 7 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 90 to 100

Thanks for feedback, I updated documentation: https://wiki.czechidm.com/devel/dev/configuration/backend#identity and I close this ticket.

Actions

Also available in: Atom PDF