• Views
  • Iteration Report
  • My Iteration Report
  •  
OMERO.server
  • Login
  • Help/Guide
  • About Trac
  • Preferences
  • Wiki
  • Timeline
  • Roadmap
  • Browse Source
  • View Tickets
  • Search

Context Navigation

  • ← Previous Ticket
  • Next Ticket →

Ticket #782 (new task)

Opened 15 months ago

Last modified 6 months ago

Possibly add "expires" column to password table

Reported by: jmoore Owned by: atarkowska
Priority: minor Milestone: OMERO-Beta4
Component: Security Version: 3.0-M1
Keywords: Cc: atarkowska, callan

Description

Currently we have no way to measure when a password should be changed. It might make sense to add an "expires" date column to the password table.

Change History

Changed 14 months ago by jmoore

  • owner changed from jmoore to atarkowska

Passing off to Ola who already has an implementation.

Changed 14 months ago by atarkowska

New column to PASSWORD table as created - date format with default value CURRENT_DATE To IAdmin: java.util.Date (or String) getUserPasswordCreatedDate(Long id); To Omero.properties: expire.time = 90 (days) To JbossLoginModule?: when protected String getUsersPassword() throws LoginException? makes a statement: select p.hash as PASSWD, p.dn as DN, p.created as CREATED from experimenter e, password p where e.omename=? and e.id = p.experimenter_id and checks password in DB (LDAP plugin will not contain this option or If Ldap has password expire date inside we can support it as well) gets rs.getDate(3).

If CREATED+expire.time < TodayDate? true else false

To WEBADMIN: On the users list we can icon for each of account where password expired. The same information on user details page

Changed 6 months ago by atarkowska

  • milestone changed from 3.0-Beta3 to 3.0-Beta4
Note: See TracTickets for help on using tickets.

Download in other formats:

  • Comma-delimited Text
  • Tab-delimited Text
  • RSS Feed

Trac Powered

Powered by Trac 0.11
By Edgewall Software.

Visit the Trac open source project at
http://trac.edgewall.org/