]
Christian Bauer closed JBSEAM-2687.
-----------------------------------
Fix Version/s: 2.1.0.GA
Resolution: Done
I've decided to go with b).
Reset Password feature does not activate accounts
-------------------------------------------------
Key: JBSEAM-2687
URL:
http://jira.jboss.com/jira/browse/JBSEAM-2687
Project: JBoss Seam
Issue Type: Bug
Components: Wiki
Reporter: Christian Bauer
Assigned To: Christian Bauer
Fix For: 2.1.0.GA
Users are trying to use the Reset Password feature to resend an activation e-mail. This
doesn't work, inactive accounts can't reset their password. The bug is that the UI
doesn't show that, in fact, the password of an inactive account is actually reset
properly, but the account is still not activated.
We have two choices here:
a) Do not allow users to reset the password of an inactive account, period. This means we
can continue using the 'ACTIVE' flag as an administrative tool for banning users
after abuse. Required change is a check in the UserPasswordReset action with an
appropriate message when the user tries to reset an inactive account.
b) Do allow users to reset the password of an inactive account (like we already do) but
also activate the account on password reset, if it was inactive. This would make the
'ACTIVE' flag useless for administrative purposes but give us a "resend
activation e-mail" feature that many users already expect behind a "reset
password" function.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: