adapt_authoring icon indicating copy to clipboard operation
adapt_authoring copied to clipboard

Published 20 hours ago • verified publisher icon adaptlearning

Send email notification on user password/email change

Open taylortom opened this issue 6 years ago • 1 comments

Affected Area

User profile page

Requested Feature

It would be nice to inform the user of any key changes like this in case of any malicious activity (mailing the old email account in the case of an email change).

taylortom avatar Feb 18 '19 11:02 taylortom

Update: we already attempt to send an email on a manual password change: https://github.com/adaptlearning/adapt_authoring/blob/f5adc195cc8c5a3a3ba42fb1bc9ed3d169f5e711/lib/usermanager.js#L819-L825 Although this 'change password' functionality is now only available when SMTP is disabled so it would never actually send.

Nothing similar for a username/email change AFAIK.

tomgreenfield avatar Apr 30 '19 10:04 tomgreenfield