https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292015-12-04T08:35:49ZRedmineRedmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=676432015-12-04T08:35:49ZJan from Planio www.plan.io
<ul><li><strong>Description</strong> updated (<a title="View differences" href="/journals/67643/diff?detail_id=52317">diff</a>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=676632015-12-05T10:06:38ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Target version</strong> changed from <i>Candidate for next major release</i> to <i>3.3.0</i></li></ul><p>Nice addition but maybe a bit late for 3.2.0. I'm assigning it to 3.3.0</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678262015-12-11T11:33:48ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <a href="/attachments/14824">0000-Add-optional-user-parameter-to-I18n-format_time-to-o.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14824/0000-Add-optional-user-parameter-to-I18n-format_time-to-o.patch">0000-Add-optional-user-parameter-to-I18n-format_time-to-o.patch</a> added</li><li><strong>File</strong> <a href="/attachments/14825">0002-Add-Mailer-security_notification.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14825/0002-Add-Mailer-security_notification.patch">0002-Add-Mailer-security_notification.patch</a> added</li><li><strong>File</strong> <i>0007-Send-a-security-notification-when-users-gain-or-loos.patch</i> added</li></ul><p>Jean-Philippe Lang wrote:</p>
<blockquote>
<p>Nice addition but maybe a bit late for 3.2.0. I'm assigning it to 3.3.0</p>
</blockquote>
<p>Thanks for your feedback. 3.3.0 would be great!</p>
<p>After review, I'm also updating the patch series:</p>
<ul>
<li>replace bogus gmail address with more appropriate example.foo address</li>
<li>rebase on current master (fixed a test)</li>
<li>use correct time zone for mails</li>
</ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678272015-12-11T11:34:04ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0002-Add-Mailer-security_notification.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678282015-12-11T11:34:22ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0007-Send-a-security-notification-when-users-gain-or-loos.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678612015-12-12T13:29:15ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0004-Send-a-security-notification-when-a-user-s-email-add.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678622015-12-12T13:30:33ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <a href="/attachments/14834">0004-Send-a-security-notification-when-a-user-s-email-add.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14834/0004-Send-a-security-notification-when-a-user-s-email-add.patch">0004-Send-a-security-notification-when-a-user-s-email-add.patch</a> added</li></ul><p>Fix Patch 4 so that the user whose email address is changed gets the mail (not the current user). They might differ in case an admin changes email addresses for a different user.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678742015-12-13T06:10:18ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0007-Send-a-security-notification-when-users-gain-or-loos.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678752015-12-13T06:10:24ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0006-Send-a-security-notification-when-certain-settings-a.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678762015-12-13T06:11:00ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <i>0007-Send-a-security-notification-when-users-gain-or-loos.patch</i> added</li><li><strong>File</strong> <a href="/attachments/14840">0006-Send-a-security-notification-when-certain-settings-a.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14840/0006-Send-a-security-notification-when-certain-settings-a.patch">0006-Send-a-security-notification-when-certain-settings-a.patch</a> added</li></ul><p>Fix patches 6 and 7 so that security notifications only get sent to active admins only.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678812015-12-13T07:12:31ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0003-Send-a-security-notification-when-a-user-s-password-.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678822015-12-13T07:13:22ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <a href="/attachments/14841">0003-Send-a-security-notification-when-a-user-s-password-.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14841/0003-Send-a-security-notification-when-a-user-s-password-.patch">0003-Send-a-security-notification-when-a-user-s-password-.patch</a> added</li></ul><p>Fix patch 3 to also send a security notification when the user's password is changed after a lost password.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678852015-12-13T07:35:20ZJan from Planio www.plan.io
<ul><li><strong>File</strong> deleted (<del><i>0007-Send-a-security-notification-when-users-gain-or-loos.patch</i></del>)</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678862015-12-13T07:36:21ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <a href="/attachments/14842">0007-Send-a-security-notification-when-users-gain-or-loos.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14842/0007-Send-a-security-notification-when-users-gain-or-loos.patch">0007-Send-a-security-notification-when-users-gain-or-loos.patch</a> added</li></ul><p>Fix patch 7 to only send security notifications when admins are active.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=678912015-12-13T08:39:07ZJan from Planio www.plan.io
<ul><li><strong>File</strong> <a href="/attachments/14843">0008-Allow-overriding-of-originator-and-remote_ip-causing-a-s.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/14843/0008-Allow-overriding-of-originator-and-remote_ip-causing-a-s.patch">0008-Allow-overriding-of-originator-and-remote_ip-causing-a-s.patch</a> added</li></ul><p>Adding patch 8 which allows overriding of originator and remote_ip causing a security notification and use these overrides in lost password procedure (where no real session is initiated).</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=708092016-05-08T08:29:08ZJean-Philippe Langjp_lang@yahoo.fr
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Closed</i></li><li><strong>Assignee</strong> set to <i>Jean-Philippe Lang</i></li><li><strong>Resolution</strong> set to <i>Fixed</i></li></ul><p>Feature added with a few changes, eg. we're sending one email about changed settings to all admins instead of one email to each amdin for each setting.<br />Thanks.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=722912016-07-19T10:34:24ZToshi MARUYAMA
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/23369">Defect #23369</a>: encoding error in locales de.yml</i> added</li></ul> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=726372016-08-10T13:25:30ZJoel Bearden
<ul></ul><p>This is a nice feature. <strong>How do I turn these notifications off?</strong> Or limit the recipient list?</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=733082016-09-06T04:36:53ZToshi MARUYAMA
<ul></ul><p>Joel Bearden wrote:</p>
<blockquote>
<p>This is a nice feature. <strong>How do I turn these notifications off?</strong> Or limit the recipient list?</p>
</blockquote>
<p>Please create new feature issue.</p> Redmine - Feature #21421: Security Notifications when security related things are changedhttps://www.redmine.org/issues/21421?journal_id=941642019-10-05T02:10:31ZGo MAEDA
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-1 priority-4 priority-default" href="/issues/32193">Defect #32193</a>: Add turn on/off button to control sending security notifications</i> added</li></ul>