Comment 1 Mark Macdonald 2011-08-16 10:21:34 EDT

1. Go to your Profile page in Orion
2. Type in the Old Password incorrectly.
3. Type in a new password.
3. Click Save.
4. You get "Profile Saved!", but the change does not take effect since the old password was wrong.



Also: if your new password is empty, the page appears to work ("Profile saved!") but again the change does not take effect. Since the Create Account wizard lets you choose an empty password, the profile page should too.

Comment 2 John Arthorne 2011-08-16 10:53:05 EDT

(In reply to comment #1)
> Since the Create Account wizard lets you choose an empty password, the profile page should too.

Or, neither of them should allow empty passwords!

Comment 3 Malgorzata Janczarska 2011-08-29 08:37:00 EDT

Mark, I was unable to reproduce the problem you described in comment 1. I went though the code and it seems that you should always get the error response if old password doesn't match. I however fixed the second problem you described (with the empty password). I don't allow to create/update user with an empty password. So you'll get an error message when you try to change password to empty string.
Can you verify if you still get the original problem you described? It might have been fixed by the way. If you do could you please start firebug and give mi some details:
1. What is the actual response for PUT /users
2. What is the put data content (just tell me if old and new passwords are send to server, you don't have to provide them to me;))
It'll help me investigate.

Comment 4 Mark Macdonald 2011-08-29 16:02:43 EDT

(In reply to comment #3)
> Mark, I was unable to reproduce the problem you described in comment 1. 

I can't reproduce it either, so feel free to close this bug...

Comment 5 Malgorzata Janczarska 2011-08-30 04:31:51 EDT

(In reply to comment #4)
> I can't reproduce it either, so feel free to close this bug...
Ok, thanks.