1.14.0.txt

doc/release_notes/1.14.0.txt
Last Update: 2017-12-19 12:40:21 -0800

New Features

  • A change_password_notify feature has been added, which emails the user when the change_password feature is used to change their password. This can alert the user when their password may have been changed without their knowledge.

Other Improvements

  • When using the account_expiration feature with the reset_password feature, resetting the passwords for expired accounts is no longer allowed. Note that the previous behavior isn't considered a security issue, because even after resetting their password, expired accounts could not login.

  • When using the account_expiration feature with the lockout feature, unlocking expired accounts is no longer allowed. Note that the previous behavior isn't considered a security issue, because even after unlocking the account, expired accounts could not login.