User Created Although Password not Long Enough about kapua HOT 4 OPEN

While this could actually be an issue, it should not happen anymore after fixing #14. So I'd say to keep this open but postpone an actual fix for a patch release.

from kapua.

Hey @lorthirk,
I have checked this in the latest commit and the user is still created if password is not valid.

from kapua.

I have verified that this issue does not manifest itself anymore, but as said above - we are keeping it open.

from kapua.

Ok so in the latest commit I found that there is a way to create a user although password is not long enough. It is a super-corner case and it is not likely to be reproduced in e.g. production, but we have to be aware of it.

1. Login as kapua-sys, create an account (e.g. account0)
2. Set min password length for account0 to e.g. 40
3. Create a user in account0 (e.g. user0) and add ALL permission to him
4. Now open second browser, login as user0
5. Go to users, click ADD
6. in the first browser change the min password length to e.g. 50
7. In the second browser try to create a user with password lengh of 40 - observe the error
8. Close the Add new user window and observe the new user - it has been created, although password was not long enoguh.

As said before, this is a corner case and it is really har dto reproduce it, becasue admin user would have to change min password length when the sub-user has opened "add new user" dialogu window.
Nonetheless, I am keeping it here, so we don't forget about it.

from kapua.