u/pc/rhodecode-enterprise-ce-fork-pc Files · docs/release-notes/release-notes-4.1.1.rst

auth: don't break hashing in case of user with empty password....

auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.

marcink - - Load All Authors

File last commit:

r174:038f2243 stable


                r2203:8a18c3c3

default

Download file

             release-notes-4.1.1.rst
        
                    15 lines
            
             | 300 B
            
                | text/x-rst
            
             |
                RstLexer
            
             / docs / release-notes / release-notes-4.1.1.rst
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        marcink
    
docs: added info about release 4.1.1

              r174
            
      |RCE| 4.1.1 |RNS|

      -----------------

      Release Date

      ^^^^^^^^^^^^

      - 2016-06-14

      Fixes

      ^^^^^

      - security: fixed permissions issues on pyramid auth-plugins views.

        They no longer raise an internal server error page when accessed unauthorized.

      - search: use better ElasticSearch repo filters. (EE only)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

marcink docs: added info about release 4.1.1	r174	\|RCE\| 4.1.1 \|RNS\|
		-----------------

		Release Date
		^^^^^^^^^^^^

		- 2016-06-14

		Fixes
		^^^^^

		- security: fixed permissions issues on pyramid auth-plugins views.
		They no longer raise an internal server error page when accessed unauthorized.

		- search: use better ElasticSearch repo filters. (EE only)