[MRM-1047] Archiva allows deployment by user with expired password

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.1.3
• Fix Version/s: 1.2
• Component/s: Users/Security
• Assignee: Brett Porter
• Reporter: Wendy Smoak
• Created: 17/Dec/08 17:47
• Updated: 21/Mar/09 21:02
• Resolved: 19/Mar/09 10:33

Description

If a user has the repo manager role, he can still deploy artifacts even if his password is expired and/or flagged as must be changed.

An expired password is no longer valid, and Archiva should prevent access to the repository until it is changed.