[interchange-cvs] CVS notice: activity by jon

[interchange-cvs@lists.akopia.com]

CVS activity by user 'jon':
interchange/lib/Vend UserDB.pm,1.13.6.22,1.13.6.23
Update of /var/cvs/interchange/lib/Vend
In directory interchange.redhat.com:/tmp/cvs-serv17422/lib/Vend

Modified Files:
      Tag: DEV_4_7_0
	UserDB.pm 
Log Message:
Rework password changing to always use UserDB functions instead of directly
writing to database.

When creating UserDB object, use Vend::username instead of session{username}
for better security.

Allow Vend::superuser to change passwords of any user.

Use UserDBPasswordMinLength directive (default is 4 characters).

Log attempts by anyone other than Vend::superuser or access::super == 1
to change another user's password (e.g. by munging form variable mv_username).