Closed Bug 986006 Opened 12 years ago Closed 12 years ago

Only allow resetting the pin via the API if the user has been through re-authentication

Categories

(Marketplace Graveyard :: Payments/Refunds, defect, P5)

Product:
Marketplace Graveyard
Component:
Payments/Refunds
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: andy+bugzilla, Assigned: mstriemer)

References

Details

(Whiteboard: [qa-])

Shouldn't be able to reset the pin if the session is locked out.
Priority: -- → P3
Assignee: amckay → mstriemer
This should already be the case. This is probably mostly about adding some tests to prove it.
Summary: Block reset pin if locked out in the API → Only allow resetting the pin via the API if the user has been through re-authentication
Priority: P3 → P5
These tests are already in place. Marking as resolved.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Whiteboard: [qa-]
You need to log in before you can comment on or make changes to this bug.