[MAGNOLIA-2834] Login screen should show Magnolia License and Version of the System Created: 05/Aug/09  Updated: 28/Nov/12  Resolved: 06/Nov/12

Status: Closed
Project: Magnolia
Component/s: admininterface
Affects Version/s: None
Fix Version/s: 5.0

Type: Improvement Priority: Critical
Reporter: Christian Ringele Assignee: Andreas Weder
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File Picture 1.png    
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Date of First Response:

 Description   

This is a request by Pascal:

The login screen should show:

  • The used Magnolia license
  • The used Magnolia version
    Comparable to on how its shown within the adminCentral (see attachment).


 Comments   
Comment by Jan Haderka [ 09/Oct/12 ]

Perhaps we should reevaluate if this is still

  • useful and necessary,
  • fitting in 5.0 design and
  • secure (you would be advertising exactly which version is used by client so someone can in theory use this to target weekness in the given version of the system).
Comment by Andreas Weder [ 06/Nov/12 ]

The license is visible on the M5 login screen. Showing the version number is not such a good idea, I agree with that, as it is considered a security risk.

Comment by Richard Unger [ 06/Nov/12 ]

If you do this, make it switch-offable by configuration, as displaying this information on the login screen can be an information disclosure (security) problem.

I don't really want to start a debate whether it is a real security problem or not, but I can tell you for sure that our security officer would immediately demand that we hide this information. Security officers are like that.

Comment by Andreas Weder [ 06/Nov/12 ]

Richard, you're referring to the version number, right, not the license?

I'd really not like to see any version number on the login screen. We can still show a version number after log-in, e.g. together with the EE license and other system info, if that's really required.

Comment by Richard Unger [ 06/Nov/12 ]

Yeah, most important is the version number.

For the License, I think it is fine to display the information whether it is EE or CE, and whether the License is valid.
However, I would not display the Licencee (name or email), nor the date when the license expires.

Generated at Mon Feb 12 03:40:34 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.