[MAGNOLIA-2834] Login screen should show Magnolia License and Version of the System Created: 05/Aug/09 Updated: 28/Nov/12 Resolved: 06/Nov/12 |
|
| Status: | Closed |
| Project: | Magnolia |
| Component/s: | admininterface |
| Affects Version/s: | None |
| Fix Version/s: | 5.0 |
| Type: | Improvement | Priority: | Critical |
| Reporter: | Christian Ringele | Assignee: | Andreas Weder |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Attachments: |
|
| Template: |
|
| Acceptance criteria: |
Empty
|
| Task DoD: |
[ ]*
Doc/release notes changes? Comment present?
[ ]*
Downstream builds green?
[ ]*
Solution information and context easily available?
[ ]*
Tests
[ ]*
FixVersion filled and not yet released
[ ] 
Architecture Decision Record (ADR)
|
| Date of First Response: |
| Description |
|
This is a request by Pascal: The login screen should show:
|
| Comments |
| Comment by Jan Haderka [ 09/Oct/12 ] |
|
Perhaps we should reevaluate if this is still
|
| Comment by Andreas Weder [ 06/Nov/12 ] |
|
The license is visible on the M5 login screen. Showing the version number is not such a good idea, I agree with that, as it is considered a security risk. |
| Comment by Richard Unger [ 06/Nov/12 ] |
|
If you do this, make it switch-offable by configuration, as displaying this information on the login screen can be an information disclosure (security) problem. I don't really want to start a debate whether it is a real security problem or not, but I can tell you for sure that our security officer would immediately demand that we hide this information. Security officers are like that. |
| Comment by Andreas Weder [ 06/Nov/12 ] |
|
Richard, you're referring to the version number, right, not the license? I'd really not like to see any version number on the login screen. We can still show a version number after log-in, e.g. together with the EE license and other system info, if that's really required. |
| Comment by Richard Unger [ 06/Nov/12 ] |
|
Yeah, most important is the version number. For the License, I think it is fine to display the information whether it is EE or CE, and whether the License is valid. |