id	summary	reporter	owner	description	type	status	priority	component	severity	resolution	keywords	cc	release
7187	AccountManager doesn't verify email when resetting password	sagar.behere@gmail.com	pacopablo	I am using the account manager plugin with SvnServePasswordStore and the passwords coming from a svnserve passwd file.\r\n\r\nI have a user called 'test' with email sagar@pobox.com. When I click on Forgot password and enter  username test and email wrongemail@wrongserver.com and click ok, i get a message saying "Your new password has been emailed to you at wrongemail@wrongserver.com" Then, when I check the svnserve passwd file, I find that the password for user test has been reset to a random hexadecimal like value.\r\n\r\nThe reset password feature should have refused to work and stated something like "wrongemail@wrongserver.com is not the email associated with username test and the email will NOT be sent."\r\n\r\nSystem: Ubuntu Lucid, trac 0.12b1, I installed account manager from the trunk on 31st May 2010	defect	closed	high	AccountManagerPlugin	critical	fixed		rjollos	0.12