Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-42260

Reset-Pass > add ability to reset password for mutliple accounts tied to the same email address

    Details

    • Type: Feature Request
    • Status: Awaiting Review
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 20.0
    • Fix Version/s: None
    • Labels:
      None
    • Test Plan:
      Hide
      1. Create at least two accounts which are tied to the same email address (this may require admin access)
      2. Use the Reset Password tool for the email address used in the above step
      3. Verify you receive one email per account which is tied to the email address
      4. Verify you can successfully reset the password for each account, using the corresponding password change validation email
      Show
      Create at least two accounts which are tied to the same email address (this may require admin access) Use the Reset Password tool for the email address used in the above step Verify you receive one email per account which is tied to the email address Verify you can successfully reset the password for each account, using the corresponding password change validation email

      Description

      Currently, if a user tries to reset their password and they provide an email address which is tied to more than one account, they are provided with a message saying "If an account using this email address exists, a password change confirmation email will be sent to the address."

      This message used to indicate that the function could not be performed because there are more than one user with the email address. This was changed due to security concerns.

      Due to this, a legitimate user may be confused as to why they never received a password change validation email, because the message said they would receive one.

      To rectify this, we should introduce new functionality to send a password change validation email to each account associated with the email address. The email should clearly state which account the password change validation is for, so the user can elect to change one, some, or all of the passwords associated with their respective accounts.

        Gliffy Diagrams

          Zeplin

            Attachments

              Activity

                People

                Assignee:
                Unassigned Unassigned
                Reporter:
                bjones86 Brian Jones
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                  Dates

                  Created:
                  Updated:

                    Git Integration