-
Notifications
You must be signed in to change notification settings - Fork 73
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Do not force customer to change the password when an agent has changed customer data via AdminCustomerUser #779
Comments
Hi hcamminadi, thanks for your contribution. You are right, that this behavior should be changed. At the moment we do not yet totally support the customer preferences and password options. I think this here should be done as an addition to that general task, and I linked the issue to #750. Best regards, Sven |
When looking at the history of that code I found that code comment that might be interesting:
Thus, when making changes it must be assured that resetting customer passwords still works. |
Closed with merging #2532 |
Situation:
An existing customer user has already signed in via customer.pl and changed the initial password. Afterwards an agent changes any data e.g. city or postal code via AdminCustomerUser. As the agent leaves the password field blank, the pw value is not overwritten in db.
As customer_preferences preferences_key 'UserLastPwChangeTime' will be removed due to the agents action this will lead to another password change when the customer tries to log in the next time.
Suggestion:
Problem is that in AdminCustomerUser.prn DeleteOnePreference is called with key 'UserLastPwChangeTime' if the password did not match the old one. It would help if this action is skipped if the new password is empty as empty passwords will not be stored. If there are plans to allow an agent to empty an existing password this would not help.
The surrounding if in the next block is new and helps for me:
The text was updated successfully, but these errors were encountered: