search

thyseus / yii-user-management

a user management module collection for the yii framework
185 stars 122 forks source link

Profile Update attempts to validate password #26

Open GTeKi opened 12 years ago

GTeKi commented 12 years ago

It looks like the mass assignment is filling the password with the hashed pw from the database, then trying to validate it against std validation rules. There is no change pw operation on this update form, so it should not be validating the pw here at all.

This is issue 118 in google code. It still not working.

thyseus commented 12 years ago

i can not reproduce this. Updating the profile works without changing the user table. Can you please elaborate when this error occurs? thank you.

Slivicon commented 11 years ago

To reproduce this issue, change 'password_requirements' to have 'maxLen' = 18 and have a user with password length less than 18. Go to manage profiles as admin and edit that user profile. After clicking save changes, password validation error should be shown.

Workaround: Comment out YumProfileController.php lines 42-45, and insert modified lines as shown below:

            //$user->validate();

            //if(!$user->hasErrors() && !$profile->hasErrors()) {
                //if($user->save() && $profile->save()) {
                        if(!$profile->hasErrors()) {
                            if($profile->save()) {