Skip to content
Snippets Groups Projects
  1. Aug 11, 2022
  2. Mar 11, 2022
  3. Mar 08, 2022
  4. Mar 02, 2022
  5. Feb 09, 2022
    • Andreas Ellewsen's avatar
      Add flag to prevent nin verification in frontend · a6dd5745
      Andreas Ellewsen authored and Jonas Braathen's avatar Jonas Braathen committed
      If a sponsor verifies a nin that is already in use by an account in
      cerebrum, the guest will gain access to that account, which in turn
      allows the guest to change the password of that account. This makes it
      possible to abuse the guest service to steal the account of users.
      
      A feature that checks for this problem, and helps the sponsor make a
      decision on it, will be introduced in the near future. At that point
      nin verification can be enabled again.
      
      Resolves: GREG-202
      a6dd5745
  6. Nov 26, 2021
Loading