##// END OF EJS Templates
auth: Fix password_changed function, fixes #4043....
auth: Fix password_changed function, fixes #4043. Never repot a changed password for default or anonymous users. If anonymous access is disabled we don't get the default user here so we also have to check if it is the anonymous user. In both cases (default user and anonymous user) we can skip the password change check and return False.

File last commit:

r174:038f2243 stable
r482:930b0a4d default
Show More
release-notes-4.1.1.rst
15 lines | 300 B | text/x-rst | RstLexer

|RCE| 4.1.1 |RNS|

Release Date

  • 2016-06-14

Fixes

  • security: fixed permissions issues on pyramid auth-plugins views. They no longer raise an internal server error page when accessed unauthorized.
  • search: use better ElasticSearch repo filters. (EE only)