{"action":"created","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/16197","labels_url":"https://api.github.com/repos/owncloud/core/issues/16197/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/16197/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/16197/events","html_url":"https://github.com/owncloud/core/issues/16197","id":74313122,"number":16197,"title":"If admin user changes password using recovery password of a user while he is logged in, he is not warned to relogin.","user":{"login":"SergioBertolinSG","id":9048796,"avatar_url":"https://avatars.githubusercontent.com/u/9048796?v=3","gravatar_id":"","url":"https://api.github.com/users/SergioBertolinSG","html_url":"https://github.com/SergioBertolinSG","followers_url":"https://api.github.com/users/SergioBertolinSG/followers","following_url":"https://api.github.com/users/SergioBertolinSG/following{/other_user}","gists_url":"https://api.github.com/users/SergioBertolinSG/gists{/gist_id}","starred_url":"https://api.github.com/users/SergioBertolinSG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SergioBertolinSG/subscriptions","organizations_url":"https://api.github.com/users/SergioBertolinSG/orgs","repos_url":"https://api.github.com/users/SergioBertolinSG/repos","events_url":"https://api.github.com/users/SergioBertolinSG/events{/privacy}","received_events_url":"https://api.github.com/users/SergioBertolinSG/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/owncloud/core/labels/app:encryption","name":"app:encryption","color":"02d7e1"},{"url":"https://api.github.com/repos/owncloud/core/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/owncloud/core/labels/sev4-low","name":"sev4-low","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/owncloud/core/milestones/37","html_url":"https://github.com/owncloud/core/milestones/8.2-next","labels_url":"https://api.github.com/repos/owncloud/core/milestones/37/labels","id":993629,"number":37,"title":"8.2-next","description":"","creator":{"login":"craigpg","id":160667,"avatar_url":"https://avatars.githubusercontent.com/u/160667?v=3","gravatar_id":"","url":"https://api.github.com/users/craigpg","html_url":"https://github.com/craigpg","followers_url":"https://api.github.com/users/craigpg/followers","following_url":"https://api.github.com/users/craigpg/following{/other_user}","gists_url":"https://api.github.com/users/craigpg/gists{/gist_id}","starred_url":"https://api.github.com/users/craigpg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craigpg/subscriptions","organizations_url":"https://api.github.com/users/craigpg/orgs","repos_url":"https://api.github.com/users/craigpg/repos","events_url":"https://api.github.com/users/craigpg/events{/privacy}","received_events_url":"https://api.github.com/users/craigpg/received_events","type":"User","site_admin":false},"open_issues":434,"closed_issues":0,"state":"open","created_at":"2015-02-24T16:19:37Z","updated_at":"2015-05-11T08:03:18Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2015-05-08T10:19:36Z","updated_at":"2015-05-11T09:42:23Z","closed_at":null,"body":"### Steps to reproduce\r\n\r\n1. Enable encryption app.\r\n2. Enable encryption module in admin page.\r\n3. Put a recovery password in the admin page.\r\n4. Create a user1.\r\n5. Login with user1 and enable recovery password.\r\n6. Keep user1 logged in.\r\n6. Login with admin using a different browser.\r\n7. Go to users page.\r\n8. Change password to user1 entering recovery password correctly first.\r\n\r\n\r\n### Expected behaviour\r\nUser1 gets an error message warning him to do relogin.\r\n\r\n### Actual behaviour\r\nPassword is changed. User1 is not warned at all.\r\n\r\n\r\n### Server configuration\r\n**Operating system**:\r\nUbuntu 14.04\r\n\r\n**Web server:**\r\nApache\r\n\r\n**Database:**\r\nMySQL\r\n\r\n**PHP version:**\r\n5.5.9\r\n\r\n**ownCloud version:** (see ownCloud admin page)\r\n{\"installed\":true,\"maintenance\":false,\"version\":\"8.1.0.5\",\"versionstring\":\"8.1 beta 1\",\"edition\":\"Enterprise\"}\r\n\r\n**Updated from an older ownCloud or fresh install:**\r\nUpdated from 8.0.3\r\n\r\n**List of activated apps:**\r\nDefault in enterprise edition.\r\nEncryption.\r\n\r\n**The content of config/config.php:**\r\n\r\n```\r\n\r\n```\r\n\r\n\r\n**Are you using external storage, if yes which one:** local/smb/sftp/...\r\nNo\r\n\r\n**Are you using encryption:** \r\nYes\r\n\r\n**Logs**\r\n```\r\n```\r\n### Client configuration\r\n\r\n**browser**\r\nChrome 41\r\n"},"comment":{"url":"https://api.github.com/repos/owncloud/core/issues/comments/100834292","html_url":"https://github.com/owncloud/core/issues/16197#issuecomment-100834292","issue_url":"https://api.github.com/repos/owncloud/core/issues/16197","id":100834292,"user":{"login":"schiesbn","id":1589737,"avatar_url":"https://avatars.githubusercontent.com/u/1589737?v=3","gravatar_id":"","url":"https://api.github.com/users/schiesbn","html_url":"https://github.com/schiesbn","followers_url":"https://api.github.com/users/schiesbn/followers","following_url":"https://api.github.com/users/schiesbn/following{/other_user}","gists_url":"https://api.github.com/users/schiesbn/gists{/gist_id}","starred_url":"https://api.github.com/users/schiesbn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/schiesbn/subscriptions","organizations_url":"https://api.github.com/users/schiesbn/orgs","repos_url":"https://api.github.com/users/schiesbn/repos","events_url":"https://api.github.com/users/schiesbn/events{/privacy}","received_events_url":"https://api.github.com/users/schiesbn/received_events","type":"User","site_admin":false},"created_at":"2015-05-11T09:42:23Z","updated_at":"2015-05-11T09:42:23Z","body":"Yes, that's the problem. The user has a valid session with a un-encrypted private key and everything he needs. So there is no way to detect that the key is no longer the right one. \r\n\r\nBut as said, that's only a theoretical problem in a test scenario. In a real world the user will never ask the admin to recover his login while he is logged in and edit files."}}