Developers of Plone

Kees Hink | 20 Aug 2012 15:53

special characters in passwords don't work

Just filed a bug about this: https://dev.plone.org/ticket/13114

I created a branch of plone.app.users which prevents the error from 
happening and gives a halfway decent form validation message.

I'd like for someone else to take a look at it. If it seems a sane 
approach [1], we can merge the branch.

We'd then have to also create a branch for the translations to update 
translations of help_password_creation, as that now also says "No 
special characters" [2].

Kees

[1] Did Plone ever allow special characters in passwords?
[2] Translator beware: Some Germans would deny that characters with 
Umlauts are special.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

headers

Wichert Akkerman | 21 Aug 2012 09:22

Re: special characters in passwords don't work

On 08/20/2012 03:53 PM, Kees Hink wrote:
> Just filed a bug about this: https://dev.plone.org/ticket/13114
>
> I created a branch of plone.app.users which prevents the error from
> happening and gives a halfway decent form validation message.
>
> I'd like for someone else to take a look at it. If it seems a sane
> approach [1], we can merge the branch.
>
> We'd then have to also create a branch for the translations to update
> translations of help_password_creation, as that now also says "No
> special characters" [2].

I don't think that is acceptable. As you already indicated that would 
not allow Germans to use perfectly normal German words. Nor would it 
allow any asian to use any asian word. Instead of pretending this is 
1980 and limiting passwords to ASCII we should just make unicode work.

Wichert.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

headers

David Glick (GW | 21 Aug 2012 19:02

Re: special characters in passwords don't work


On Aug 21, 2012, at 12:22 AM, Wichert Akkerman wrote:

> On 08/20/2012 03:53 PM, Kees Hink wrote:
>> Just filed a bug about this: https://dev.plone.org/ticket/13114
>>
>> I created a branch of plone.app.users which prevents the error from
>> happening and gives a halfway decent form validation message.
>>
>> I'd like for someone else to take a look at it. If it seems a sane
>> approach [1], we can merge the branch.
>>
>> We'd then have to also create a branch for the translations to update
>> translations of help_password_creation, as that now also says "No
>> special characters" [2].
>
> I don't think that is acceptable. As you already indicated that would
> not allow Germans to use perfectly normal German words. Nor would it
> allow any asian to use any asian word. Instead of pretending this is
> 1980 and limiting passwords to ASCII we should just make unicode work.
>

+1

----------
David Glick
 Web Developer
 davidglick@...
 206.286.1235x32

(Continue reading)

headers

Jens W. Klein | 22 Aug 2012 21:55

Re: special characters in passwords don't work

On 2012-08-21 09:22, Wichert Akkerman wrote:
> On 08/20/2012 03:53 PM, Kees Hink wrote:
>> Just filed a bug about this: https://dev.plone.org/ticket/13114
>>
>> I created a branch of plone.app.users which prevents the error from
>> happening and gives a halfway decent form validation message.
>>
>> I'd like for someone else to take a look at it. If it seems a sane
>> approach [1], we can merge the branch.
>>
>> We'd then have to also create a branch for the translations to update
>> translations of help_password_creation, as that now also says "No
>> special characters" [2].
>
> I don't think that is acceptable. As you already indicated that would
> not allow Germans to use perfectly normal German words. Nor would it
> allow any asian to use any asian word. Instead of pretending this is
> 1980 and limiting passwords to ASCII we should just make unicode work.

agree, the - for english speaking people - so called special chars must 
work in passwords. in other languages they are not special from the 
users point of view.

Jens
--

-- 
Klein & Partner KG, member of BlueDynamics Alliance

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and

(Continue reading)