[JIRA] Created: (MAGNOLIA-2917) last access date is updated also after a login failure

View: New views
4 Messages — Rating Filter:   Alert me  

[JIRA] Created: (MAGNOLIA-2917) last access date is updated also after a login failure

by JIRA (on behalf of Jan Haderka) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


last access date is updated also after a login failure
------------------------------------------------------

                 Key: MAGNOLIA-2917
                 URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-2917
             Project: Magnolia
          Issue Type: Bug
          Components: core
    Affects Versions: 4.2-m1, 4.1.1, 4.0.3
            Reporter: Fabrizio Giustina
            Assignee: Fabrizio Giustina
            Priority: Minor
             Fix For: 4.2


The "last access date" information for users (available under the tools menu in admin central) is updated not only when the user logs in, but also for any failed login.
If you try logging in with superuser/wrongpassword you will see the last access date for superuser updated.

The setLastAccess() call is actually in MgnlUserManager, before the password validation. It should be moved to JCRAuthenticationModule after a successful authentication.


--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------


[JIRA] Commented: (MAGNOLIA-2917) last access date is updated also after a login failure

by JIRA (on behalf of Jan Haderka) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message



    [ http://jira.magnolia-cms.com/browse/MAGNOLIA-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24669#action_24669 ]

Hudson CI server commented on MAGNOLIA-2917:
--------------------------------------------

Integrated in !http://hudson.magnolia-cms.com/nocacheImages/16x16/blue.gif! [magnolia_main-trunk #1053|http://hudson.magnolia-cms.com/job/magnolia_main-trunk/1053/]
      last access date should be updated only after a successful login


> last access date is updated also after a login failure
> ------------------------------------------------------
>
>                 Key: MAGNOLIA-2917
>                 URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-2917
>             Project: Magnolia
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 4.0.3, 4.1.1, 4.2-m1
>            Reporter: Fabrizio Giustina
>            Assignee: Fabrizio Giustina
>            Priority: Minor
>             Fix For: 4.2
>
>
> The "last access date" information for users (available under the tools menu in admin central) is updated not only when the user logs in, but also for any failed login.
> If you try logging in with superuser/wrongpassword you will see the last access date for superuser updated.
> The setLastAccess() call is actually in MgnlUserManager, before the password validation. It should be moved to JCRAuthenticationModule after a successful authentication.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------


[JIRA] Resolved: (MAGNOLIA-2917) last access date is updated also after a login failure

by JIRA (on behalf of Jan Haderka) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message



     [ http://jira.magnolia-cms.com/browse/MAGNOLIA-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Grégory Joseph resolved MAGNOLIA-2917.
--------------------------------------

    Resolution: Fixed

> last access date is updated also after a login failure
> ------------------------------------------------------
>
>                 Key: MAGNOLIA-2917
>                 URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-2917
>             Project: Magnolia
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 4.0.3, 4.1.1, 4.2-m1
>            Reporter: Fabrizio Giustina
>            Assignee: Fabrizio Giustina
>            Priority: Minor
>             Fix For: 4.2
>
>
> The "last access date" information for users (available under the tools menu in admin central) is updated not only when the user logs in, but also for any failed login.
> If you try logging in with superuser/wrongpassword you will see the last access date for superuser updated.
> The setLastAccess() call is actually in MgnlUserManager, before the password validation. It should be moved to JCRAuthenticationModule after a successful authentication.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------


[JIRA] Updated: (MAGNOLIA-2917) last access date is updated also after a login failure

by JIRA (on behalf of Jan Haderka) :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message



     [ http://jira.magnolia-cms.com/browse/MAGNOLIA-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Grégory Joseph updated MAGNOLIA-2917:
-------------------------------------

    Fix Version/s: 4.2-RC1
                       (was: 4.2)

> last access date is updated also after a login failure
> ------------------------------------------------------
>
>                 Key: MAGNOLIA-2917
>                 URL: http://jira.magnolia-cms.com/browse/MAGNOLIA-2917
>             Project: Magnolia
>          Issue Type: Bug
>          Components: core
>    Affects Versions: 4.0.3, 4.1.1, 4.2-m1
>            Reporter: Fabrizio Giustina
>            Assignee: Fabrizio Giustina
>            Priority: Minor
>             Fix For: 4.2-RC1
>
>
> The "last access date" information for users (available under the tools menu in admin central) is updated not only when the user logs in, but also for any failed login.
> If you try logging in with superuser/wrongpassword you will see the last access date for superuser updated.
> The setLastAccess() call is actually in MgnlUserManager, before the password validation. It should be moved to JCRAuthenticationModule after a successful authentication.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------