[CONTINUUM-1257] Identification page lock

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.1-alpha-1
• Fix Version/s: 1.1-alpha-2
• Component/s: Web - Security, Web - UI
• Environment: Web interface on Firefox or Mozilla; (can't test on IE)
• Assignee: Emmanuel Venisse
• Reporter: Charles Paulet
• Created: 27/Apr/07 10:44
• Updated: 03/Jul/07 07:32
• Resolved: 03/Jul/07 07:32

Description

1 - The root user create a new user (projectleader) with a password ans sets privileges.
2 - The root user logs out.
3 - The projectleader logs in, AND checks the "remember me" checkbox.
4 - Continuum asks to change the projectleader password

Here if you don't delete the cookie, you can't exit the security/password.action page.

• Logout doesn't work
• Restart Continuum doesn't work
• Click menu item doesn't work

It seems, the 'remember me' checkbox set the login valid.
But, we can't avoid, override or bypass the security check afterward.