| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||
|---|---|---|---|---|---|---|---|---|---|
| 0000106 | SKGB-intern | neues-kennwort | public | 2012-04-01 15:00 | 2014-07-20 20:51 | ||||
| Reporter | aj | ||||||||
| Assigned To | aj | ||||||||
| Priority | normal | Severity | tweak | Reproducibility | always | ||||
| Status | resolved | Resolution | fixed | ||||||
| Projection | minor fix | ETA | < 1 day | ||||||
| Platform | The Web | OS | HTTP | OS Version | 1.1 | ||||
| Product Version | 1.1.8 | Product Build | 2012-03-31 | ||||||
| Target Version | 1.1.9 | Fixed in Version | 1.1.9 | ||||||
| Summary | 0000106: user name web form accepts uppercase chars | ||||||||
| Description | The web form for neues-kennwort accepts any string you enter and outputs an appropriate results page. While this may be nice from an information hiding point of view, it significantly reduces usability because it isn't obvious to users that <john.doe@example.org> works while <John.Doe@example.org> doesn't. If nothing else, neues-kennwort should at least lower-case the user name. | ||||||||
| Steps To Reproduce | (1) http://intern.skgb.de/neues-kennwort (2) enter "Arne.Johannessen" (3) submit | ||||||||
| Additional Information | The Account Manager may accept upper-case user names. This change would break the neues-kennwort function for users with upper-case names. In practice, however, there are no such users. Also, whether or not HTTP Authentication is implemented case-sensitively is not under our control. The current implementation is. For both reasons it may be more appropriate to just output a harsh warning in case any upper-case characters are entered. | ||||||||
| Tags | No tags attached. | ||||||||
| Attached Files |
| ||||||||
 Relationships |
|
 Relationships |
| Notes |
|
|
aj (manager) 2012-04-01 15:43 |
Added some new "smart" error messages: If uppercase characters or the suffix @skgb.de are detected, the respective hints are highlighted. The highlight's graphics may be a bit over the top, but OTOH they do need to stand out. The hints are always highlighted if they apply, even if the entered user name doesn't exist. For example, "John.Doe@skgb.de" will highlight both hints. |
| Notes |