View Issue Details

IDProjectCategoryView StatusLast Update
0009539Talerexchange AML officer webuipublic2025-05-10 02:11
ReporterChristian Grothoff Assigned Tosebasjm Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.0Fixed in Version1.0 
Summary0009539: 403 error shown after password creation
DescriptionI just set a first password on the SPA, and I immediately get a 403.
That makes no sense after first setting password; it's obvious that the account must be activated first.
But it doesn't tell me that, and more over, doesn't give me the account ID I need to activate.

Instead of showing 403, it should tell me my account ID and that I should give this to the administrators to activate my account!

In future sessions (when I just provided a password, and not just *set* a fresh password),
the SPA should show a 403, but *also* still again show me the account ID and that the administrators need to activate it.
TagsNo tags attached.
Attached Files
403.png (20,582 bytes)   
403.png (20,582 bytes)   

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2025-02-14 12:07

manager   ~0024085

(Note that I can get the key by clicking on "Profile", but that's unintuitive. Directly jumping to the profile screen instead of first showing the 403 after creating a new account/setting a new password would already help a lot.)

sebasjm

2025-02-17 18:18

developer   ~0024103

yes, there was an unsolved situation of what if any of this request failed. Now it shows the "profile" and error if one of the request to the metrics failed
image.png (37,972 bytes)   
image.png (37,972 bytes)   

sebasjm

2025-02-17 18:18

developer   ~0024104

512924620..88dd48fb8

Issue History

Date ModifiedUsernameFieldChange
2025-02-14 12:06Christian GrothoffNew Issue
2025-02-14 12:06Christian GrothoffStatusnew => assigned
2025-02-14 12:06Christian GrothoffAssigned To => sebasjm
2025-02-14 12:06Christian GrothoffFile Added: 403.png
2025-02-14 12:07Christian GrothoffNote Added: 0024085
2025-02-17 18:18sebasjmNote Added: 0024103
2025-02-17 18:18sebasjmFile Added: image.png
2025-02-17 18:18sebasjmStatusassigned => informing
2025-02-17 18:18sebasjmResolutionopen => fixed
2025-02-17 18:18sebasjmNote Added: 0024104
2025-03-28 12:11Christian GrothoffFixed in Version => 1.0
2025-05-10 02:11Christian GrothoffStatusinforming => closed
2026-08-23 14:17Florian DoldCategoryexchange AML backoffice (SPA) => exchange AML officer webui