E-Mail for new registered Users (Security-Patch 7.1.3)

RE: E-Mail for new registered Users (Security-Patch 7.1.3)

2020-04-23T05:27:17Z

Good morning Dominik,
I am sorry for the confusion.
After applying the patch with your guide I compared the section in the Instance-Settings for E-Mail: New User.
In the original 7.1.3 GA4 source there are only 2 input fields.
With security patch applied there are 3 input fields.
For me this was a good indication on how to make sure the patch was working.

@Topic: We found the solution to my original question: You need to uncheck the option for users to be able to request new passwords.

Greetings, Fredi

RE: E-Mail for new registered Users (Security-Patch 7.1.3)

2020-04-22T15:44:07Z

Hello Fredi B,

can you explain a little bit more about the new "feature" you mentioned? I don't expect that a security patch will add new features.

The only thing I found in the patch is a changed success message when a user creates an account. It seems that the success message can be that "instructions" have been sent to the user. I assume that you have to write the email template which will contain those instructions.

see https://github.com/liferay/liferay-portal/compare/7.1.3-ga4...community-security-team:7.1.3-cumulative#diff-de8470fc1669f950033cf5a0b3cfab54

E-Mail for new registered Users (Security-Patch 7.1.3)

2020-04-21T07:21:40Z

Hello Liferay,

one of the changes included in the security update for 7.1.3 GA4 is the possibility to sent new registered users an E-Mail with a link where they can setup their password.
Sadly even with the applied security-patch newly registered users only get a random generated password that can be seen on screen.How to activate this feature of the security-patch?

Greetings,
Fredi