[FIX] auth_crypt: encrypt all passwords at installation
authorOlivier Dony <odo@openerp.com>
Wed, 18 Jun 2014 13:22:44 +0000 (15:22 +0200)
committerOlivier Dony <odo@openerp.com>
Wed, 18 Jun 2014 13:32:06 +0000 (15:32 +0200)
commitf29ff5ef70fdf5035bee05ddb9e2bea33454fa0b
tree14bb67c813a6f14ef1be5cf8d26cb1980d30ef46
parent86b80cf95eb658dad45f96bbf5238e7edb777d78
[FIX] auth_crypt: encrypt all passwords at installation

When `base_crypt` was updated for v7, the auto-encryption
at installation was dropped, with user passwords only
encrypted on-demand whenever the user would connect.

It is important to encrypt all passwords immediately to
prevent password compromission for user who do not
login often or even for deactivated users who are not
allowed to login anymore.

Fixes https://bugs.launchpad.net/openobject-addons/+bug/1280152

Based on LP merge proposal by Nicolas Bessi (Camptocamp):
https://code.launchpad.net/~camptocamp/openobject-addons/improve_auth_crypt_3_please_launchpad_work-nbi/+merge/206476
addons/auth_crypt/auth_crypt.py