MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: [settings] `require_password_confirmation` set to true 

by default
pull/5687/head
mokaddem 2020-03-06 15:41:38 +01:00
parent 9bab7d8217
commit 31827905ec
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Model/Server.php
View File

@ -1262,7 +1262,7 @@ class Server extends AppModel
'require_password_confirmation' => array(
'level' => 1,
'description' => __('Enabling this setting will require users to submit their current password on any edits to their profile (including a triggered password change). For administrators, the confirmation will be required when changing the profile of any user. Could potentially mitigate an attacker trying to change a compromised user\'s password in order to establish persistance, however, enabling this feature will be highly annoying to users.'),
'value' => false,
'value' => true,
'errorMessage' => '',
'test' => 'testBool',
'type' => 'boolean',