Commit Graph

5 Commits

Author SHA1 Message Date
Olivier Dony f29ff5ef70 [FIX] auth_crypt: encrypt all passwords at installation
When `base_crypt` was updated for v7, the auto-encryption
at installation was dropped, with user passwords only
encrypted on-demand whenever the user would connect.

It is important to encrypt all passwords immediately to
prevent password compromission for user who do not
login often or even for deactivated users who are not
allowed to login anymore.

Fixes https://bugs.launchpad.net/openobject-addons/+bug/1280152

Based on LP merge proposal by Nicolas Bessi (Camptocamp):
https://code.launchpad.net/~camptocamp/openobject-addons/improve_auth_crypt_3_please_launchpad_work-nbi/+merge/206476
2014-06-18 15:32:06 +02:00
Denis Ledoux b6cd0ea820 [FIX]auth_crypt: was storing password when passsing by res.users create, like auth_signup
bzr revid: dle@openerp.com-20130801162704-fbvghil7yir8zm8c
2013-08-01 18:27:04 +02:00
Denis Ledoux f551350b80 [FIX]auth_crypt: check_credentials checking if there is a password stored, if not, not trying to crypt anything and raise
bzr revid: dle@openerp.com-20130801151539-z0bes7ylx5qwa8tw
2013-08-01 17:15:39 +02:00
Antony Lesuisse e131d46932 [IMP] auth_crypt add sha256 from enhance_base_crypt_trunk (not enabled by default)
bzr revid: al@openerp.com-20121219113339-vhstwyo51jw0znqw
2012-12-19 12:33:39 +01:00
Antony Lesuisse 3f2de50afc [IMP] auth_crypt base_crypt cleanup
bzr revid: al@openerp.com-20121219112031-mtogxyq1fxsbopz0
2012-12-19 12:20:31 +01:00