[savannah-help-public] [sr #109310] Loophole Creating Account

[anonymous]

URL:
  <http://savannah.gnu.org/support/?109310>

                 Summary: Loophole Creating Account
                 Project: Savannah Administration
            Submitted by: None
            Submitted on: Thu 11 May 2017 06:05:09 AM UTC
                Category: None
                Priority: 5 - Normal
                Severity: 4 - Important
                  Status: None
             Assigned to: None
        Originator Email: address@hidden
        Operating System: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

I cannot login with my user name (important name for me).
I used my "Lastpass" program to generate the initial password while creating
the account.  I depended on Lastpass to create a login entry in its database
or at least remember the generated password but it did not this time.

So after I verified, via the emailed link, I went to do the "Forgot Password"
process.  This is possible on every other account authorization scheme I have
ever seen.  "Savannah" will not allow me to reset the password for this
account because it is "pending".  I also cannot start over and create a new
account with my login name since it is already there.

I am in limbo.  I have an account that I forgot the password to and I am
permanently locked out.

Why does the login process lock me out of being able to reset the password?  I
never heard of that before.  What is this extra validation protecting
against?

Why am I not able to create an new account over the old one ESPECIALLY when
using the same username AND email address?

Rick Johnson
631-921-8450 (mobile)




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/support/?109310>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/