id,summary,reporter,owner,description,type,status,priority,component,severity,resolution,keywords,cc,release
7187,AccountManager doesn't verify email when resetting password,sagar.behere@gmail.com,pacopablo,I am using the account manager plugin with SvnServePasswordStore and the passwords coming from a svnserve passwd file.\r\n\r\nI have a user called 'test' with email sagar@pobox.com. When I click on Forgot password and enter  username test and email wrongemail@wrongserver.com and click ok_ i get a message saying "Your new password has been emailed to you at wrongemail@wrongserver.com" Then_ when I check the svnserve passwd file_ I find that the password for user test has been reset to a random hexadecimal like value.\r\n\r\nThe reset password feature should have refused to work and stated something like "wrongemail@wrongserver.com is not the email associated with username test and the email will NOT be sent."\r\n\r\nSystem: Ubuntu Lucid_ trac 0.12b1_ I installed account manager from the trunk on 31st May 2010,defect,closed,high,AccountManagerPlugin,critical,fixed,,rjollos,0.12