After http://drupal.org/node/165358, we still regenerate the session when changing the password of another user. Granted, changing a password for another user doesn't occur that much.
| Comment | File | Size | Author |
|---|---|---|---|
| #5 | user.module-169937-5_D6.patch | 657 bytes | darren oh |
| #2 | user.module.patch | 676 bytes | drumm |
| sess_regen_current_user.patch | 925 bytes | heine |
Comments
Comment #1
heine commentedComment #2
drummStill applies to 5.x and even 6.x, but needs to be committed to HEAD and backported. Attached is the 6.x version. It is a straightforward update and looks good, so marking RTBC.
Comment #3
alexanderpas commentedthis bug affects all tests that'll try so do something as the root user admin.
this (example) test gives WSOD due to this bug.
Comment #4
dries commentedCommitted to CVS HEAD. Updating version to Drupal 6.
Comment #5
darren ohThe original patch works for Drupal 6, but I generated one from Drupal 6 because we really need this to make tests work.
Comment #6
gábor hojtsyLooks good, committed to 6.x, thanks!