Assign a default user password - ClientAPI Component [Lead: Jon Henning]

Forum DotNetNuke® Pro... ClientAPI Compo... Assign a default user password

2/2/2006 12:32 AM

	wulant r
2 posts
www.wulantcomics.com

Assign a default user password

I have a DotNetNuke based application installed and it is running properly. But there is, I think , a weakness from DotNetNuke when "Admin" user can reset/change other user's password without asked the user's old password (page: Admin | User Accounts | Reset Password). What is the considerations of this design ? How can I customize the page so that Admin can only reset user's password to a pre-defined default password ?

Thank you.

2/3/2006 6:36 AM

	Jon Henning
1623 posts
www.codeendeavors.com

Re: Assign a default user password

Not sure how this post relates to the ClientAPI (see posting guidelines for this forum). It should have probably been posted in a more general forum like Configure It!.

That said, I am not sure where the problem is... if you are an admin should you not be able to set the password to whatever you like (just like in windows)? If we had a hardcoded default wouldn't that be a bigger security issue in that hackers would only need to guess the username until the user had a chance to update their password? If you then say that the pre-defined password should be configurable to avoid this, I assume that the admin would have the rights to set the pre-defined password, which gets us back to where we started....

2/21/2006 12:37 AM

	wulant r
2 posts
www.wulantcomics.com

Re: Assign a default user password

I am so sorry about the miss addressed posting, i hope it won't happen again later after i read the guidelines.

Thanks for the explanation, i can get the idea of the design. It make sense to me now.

Page 1 of 1

Forum

DotNetNuke® Pro...

ClientAPI Compo...

Assign a default user password