When an admin creates a user and email notifications are disabled we use empty password as far as I recall. We need to think through this scenario. Otherwise I agree.

On Nov 8, 2013 2:43 AM, "Paul Richards" <paul@mantisforge.org> wrote:
We should probably allow empty passwords to be defined [i.e. case where plugin/authentication is done via a different method e.g. http auth]
 
However, we should not allow an empty password to be used i.e. if logon type = plain/md5 etc.


On Fri, Nov 8, 2013 at 10:29 AM, Robert Munteanu <robert.munteanu@gmail.com> wrote:
Hi,

I was recently made aware that empty passwords are allowed for
MantisBT users. My knee-jerk reaction what that we should never allow
empty password to be defined, and reject an empty password string when
it's passed to the auth api.

Is there a reason for this or can we simply disallow empty passwords
from being used?

Thanks,

Robert

--
http://robert.muntea.nu/

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
mantisbt-dev mailing list
mantisbt-dev@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mantisbt-dev


------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
mantisbt-dev mailing list
mantisbt-dev@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mantisbt-dev