PW screen is good. User should populate current PW in order to change it.

brianhorakh / vita

vita source

0 stars 0 forks source link

PW screen is good. User should populate current PW in order to change it. #11

Closed inder243 closed 8 years ago

inder243 commented 8 years ago

We cannot let the user password be visible as far security breach are concerned. We need to make it hidden for unauthorized access. Please let us know what needs to be done.

brianhorakh commented 8 years ago

This is only enabled during testing - already on my list of "go live" items to remove.

inder243 commented 8 years ago

For testing can you please send us password in the web service(UserProfileInfo). Later on you can remove the same.

brianhorakh commented 8 years ago

PasswordPlainText will now appear in UserProfilesInfo

SeanGuerrero commented 8 years ago

I agree, the current Password in edit password isn't supposed to show. The other Edit Screens should show current email, username, phone number... etc. Change password should have to type in current password in order to change it.

inder243 commented 8 years ago

We have showed user current password in corresponding screen for testing, will remove it later. Will Close this issue after testing. Thanks