Removed user password from portal's profile API 82/88682/1
authorr.bogacki <r.bogacki@samsung.com>
Wed, 22 May 2019 10:27:53 +0000 (12:27 +0200)
committerKrzysztof Opasiak <k.opasiak@samsung.com>
Tue, 28 May 2019 10:52:07 +0000 (12:52 +0200)
ONAP Portal allowed to retrieve password of currently active user via
"/portalApi/loggedinUser" endpoint. Prefilled "Login Password" field
 has been changed to "*****" and password is not send anymore to the
 frontend. Only after change of this default value
 password will be updated. Confirm Password field has been removed
 from the UI. In the future password change could be additionally also
 checked on the backend side to verify current password
 before updating it.

Issue-ID: OJSI-65
Signed-off-by: Robert Bogacki <r.bogacki@samsung.com>
Reviewed-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Acked-by: Manoop Talasila <talasila@research.att.com>
Change-Id: I00b7713557247d211927c437f31f118095ad0726


No differences found