From ebedc74ae9aab661cf4c669f93ead959e79b3ffd Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Fri, 2 Sep 2011 11:47:57 +0200 Subject: [PATCH] [FIX] base_crypt: improve description to reflect new behavior lp bug: https://launchpad.net/bugs/838282 fixed bzr revid: odo@openerp.com-20110902094757-1knmhpxdlnic6ts6 --- addons/base_crypt/__openerp__.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/addons/base_crypt/__openerp__.py b/addons/base_crypt/__openerp__.py index 05f8b2762c0..c9e79688288 100644 --- a/addons/base_crypt/__openerp__.py +++ b/addons/base_crypt/__openerp__.py @@ -30,8 +30,7 @@ Replaces cleartext passwords in the database with a secure hash =============================================================== For your existing user base, the removal of the cleartext -passwords occurs the first time a user logs into the database, -after installing base_crypt. +passwords occurs immediately when you instal base_crypt. All passwords will be replaced by a secure, salted, cryptographic hash, preventing anyone from reading the original password in @@ -45,7 +44,7 @@ Security Warning ++++++++++++++++ Installing this module does not mean you can ignore other security measures, as the password is still transmitted unencrypted on the network, unless you -are using a secure protocol such as XML-RPCS. +are using a secure protocol such as XML-RPCS or HTTPS. It also does not protect the rest of the content of the database, which may contain critical data. Appropriate security measures need to be implemented by the system administrator in all areas, such as: protection of database