Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
Hi,
I just noticed that passwords for accounts on tracker.projeqtor.org and demo.projeqtor.org can be changed easily from the login screen. This looks like a security issue to me (hopefully, the admin can still revert this back but you don't want to reset the password every morning).
To me, a shared account should not be able to change password and access the user parameters (the latter can be changed) but the admin should be able to change the user parameters if needed.
Thank you,
You're right, on Demo it's been fixed.
On track, issue is different as only guest user is concerned.
We have many other users on this instance, that should be able to change password.
So, yes, possibly we'll have to reset password from time to time for guest user...
But your tracker is not the only ProjeQtOr instance where shared accounts exists.
I have an account with read-only access to ProjeQtOr used by I don't know how many people, maybe 30, maybe 50, and I don't want them to be able to change the password.
Same goes for our suppliers, I don't know how many resources they have.
Thank you for considering the issue,
Request recorded as Ticket #2447.
Notivce that this is not an issue, it is an evolution.
By the way, ProjeQtOr is not designed to share accounts.