View Issue Details

WikiRelated ChangesetsJump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0017184mantisbtapi soappublic2014-04-12 00:562014-12-08 00:34
Reportervboctor Assigned Tovboctor  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.2.17 
Target Version1.3.0-beta.1Fixed in Version1.3.0-beta.1 
Summary0017184: Anonymous authentication to soap api
Description

Currently the soap api enables anonymous logins by passing in empty user name and password. However, authentication seems to fail when the anonymous user name is passed in with empty password. The authentication API should handle both cases without given access denied.

Tagspatch

Relationships

related to 0013750 closedvboctor MantisTouch Enable anonymous access to MantisBT 

Activities

vboctor

vboctor

2014-04-12 02:08

manager   ~0039914

Here is the associated pull request:
https://github.com/mantisbt/mantisbt/pull/159/

Related Changesets

MantisBT: master b1877a6a

2014-04-21 19:14

mantishub


Details Diff		 Fixes 0017184: Anonymous authentication to soap api.

Anonymous authentication now works by passing in an empty user name
or the anonymous user name. In both cases, the password field should
be left blank. The authentication logic has been pushed into the
script login validation core API.		 Affected Issues
0017184
mod - api/soap/mc_api.php Diff File
mod - core/authentication_api.php Diff File