Admin Login without email confirmation

SEGUC17 / mean_squad

The repo for our Software Engineering course.

0 stars 3 forks source link

Admin Login without email confirmation #247

Open melzareix opened 7 years ago

melzareix commented 7 years ago

1. Severity: Low/Medium

2. Reported by: Mohamed El Zarei

3. Description: When adding a new admin, I'm redirected to a page for my email for confirmation but I can login without confirming and do admin functions.

4. Steps to reproduce the issue:

1) Login as admin 2) Add another admin

5. Expected result: I should not be asked to confirm email or at be blocked until I do so.

IElgohary commented 7 years ago

Admin is registered only by another admin so an error chance in the email is very low