[daisy] Re: change usersettings : firefox fills password field automaticly

[Bart Van den Abeele]

Indeed, i meant the user editor in the administration console. I'll try 
to be more specific the next time.  (I don't know how i would change 
settings of another user without the administration console...)

Grtz,
Bart

Bruno Dumon schreef:
> On Wed, 2007-06-06 at 11:23 +0200, Andreas Deininger wrote:
>> 2007/6/6, Bruno Dumon <bruno at outerthought.org>:
>>> On Tue, 2007-06-05 at 14:15 +0200, Bart Van den Abeele wrote:
>>>> High,
>>> LOL :-)
>>>
>>>> I noticed that when changing usersettings, firefox automaticly fills the
>>>> pasword field with that of the user that is logged in.  This is so
>>>> because i told firefox to remember my password.  It is somewhat strange
>>>> behaviour.  When i am logged in with "userX" and i am changing by
>>>> example the first name of "userY" than "userY" ends up with the pasword
>>>> of userX.
>>>>
>>>> Perhaps something can be done to prevent this in the future.
>>> I've added an autocomplete="off" to the form, which should prevent this.
>>> Thanks for the suggestion.
>> While we are at it:
>> I'm experiencing a similar problem while editing a user in the
>> administration area. There is an issue for that (DSY-413) which is
>> marked as resolved (by SVN commit 3780), however AFAICS, the problem
>> persists: I just visited the demosite with a browser that hasn't seen
>> that site ever before. After logging in as admin, I chose to store my
>> password, then I went to the administration area and tried to create a
>> new user: the password field inside the form automatically gets filled
>> with "*****".
>>
>> I now see in the recent commit 4072, that the password widgets are
>> also marked with autocomplete="off", which is not the case in commit
>> 3780. Maybe this can eventually resolve DSY-413?
> 
> Seems this doesn't help. The only thing that works for me is to rename
> the field "password" to something else.
> 
> Anyway this doesn't explain Bart's problem, because on the user settings
> form there is no field named password... though I'm now realizing he
> might have meant the user editor in the administration console.
>