opendev/gerrit
Code Issues Proposed changes

Update 2.11 release notes

Browse Source 
Mention removal of the generateHttpPassword capability.

Change-Id: I59a4aaf37bde1b9df7a5a293235847ec556cfa6a
This commit is contained in:
Khai Do 2014-09-26 10:12:43 -07:00 committed by David Pursehouse
parent 76623a1a56
commit 4ab009776b
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ReleaseNotes/ReleaseNotes-2.11.txt
View File

@ -61,7 +61,10 @@ TODO
Other
~~~~~
TODO
The 'Generate HTTP Password' capability has been removed to close a
security vulnerability. Now only administrators are allowed to generate
and delete other user's http passwords via the REST or SSH interface.
We would encourage you to clean up your project.config setting after upgrading.
Upgrades
--------