Bug 49989 – Parts of self-service service are deactivated, but links are still shown.

Bug 49989 - Parts of self-service service are deactivated, but links are still shown.


Summary:	Parts of self-service service are deactivated, but links are still shown.

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Self Service
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-08-09 16:20 CEST by Sönke Schwardt-Krummrich
Modified:	2019-08-09 16:20 CEST (History)
CC List:	0 users

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.023
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Usability
Max CVSS v3 score:

Attachments
Selectable feature even if disabled (102.96 KB, video/mp4) 2019-08-09 16:20 CEST, Sönke Schwardt-Krummrich	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sönke Schwardt-Krummrich

2019-08-09 16:20:10 CEST

Created attachment 10156 [details]
Selectable feature even if disabled

A customer deactivated the actual password-reset part of the self-service, but the links "Passwort vergessen" and "Kontozugang schützen" are still shown. If the user uses one of the links and fills the form, the service throws an error message that the service has been disabled on purpose. See also the attached video.

umc/self-service/profiledata/enabled: false
umc/self-service/passwordreset/enabled: no

The customer expected that the links are not shown to the end-users, since some of them are still try to use them.


umc/self-service/invitation/enabled: true
umc/self-service/passwordreset/blacklist/groups: Administrators,Domain Admins
umc/self-service/passwordreset/blacklist/users: <empty>
umc/self-service/passwordreset/email/enabled: yes
umc/self-service/passwordreset/email/sender_address: Password Reset Service <HIDDEN>
umc/self-service/passwordreset/email/server: localhost
umc/self-service/passwordreset/email/text_file: <empty>
umc/self-service/passwordreset/email/token_length: <empty>
umc/self-service/passwordreset/email/webserver_address: <HIDDEN>
umc/self-service/passwordreset/enabled: no
umc/self-service/passwordreset/external/command: <empty>
umc/self-service/passwordreset/external/enabled: no
umc/self-service/passwordreset/external/method: <empty>
umc/self-service/passwordreset/external/method_label: <empty>
umc/self-service/passwordreset/external/token_length: <empty>
umc/self-service/passwordreset/external/udm_property: <empty>
umc/self-service/passwordreset/limit/per_user/.*: <empty>
umc/self-service/passwordreset/limit/per_user/day: 120
umc/self-service/passwordreset/limit/per_user/hour: 60
umc/self-service/passwordreset/limit/per_user/minute: 10
umc/self-service/passwordreset/limit/total/.*: <empty>
umc/self-service/passwordreset/limit/total/day: 1000
umc/self-service/passwordreset/limit/total/hour: 200
umc/self-service/passwordreset/limit/total/minute: 120
umc/self-service/passwordreset/sms/command: <empty>
umc/self-service/passwordreset/sms/country_code: <empty>
umc/self-service/passwordreset/sms/enabled: no
umc/self-service/passwordreset/sms/password_file: <empty>
umc/self-service/passwordreset/sms/token_length: <empty>
umc/self-service/passwordreset/token_validity_period: <empty>
umc/self-service/passwordreset/whitelist/groups: Domain Users
umc/self-service/passwordreset/whitelist/users: <empty>
umc/self-service/profiledata/enabled: false
umc/web/hooks/univention-self-service: passwordreset