2017 Logging In

This forum contains HIPAA, Security, and Commons enhancement suggestions that have been evaluated by SCC and rejected or vetoed by SIG members.

Moderator: Selma Causevic

Post Reply
Message
Author
Selma Causevic
Moderator
Posts: 90
Joined: 04-10-2008 05:40 AM

2017 Logging In

#1 Post by Selma Causevic » 01-26-2017 05:54 AM

From: Angela Raue (MMH)

Received: Thursday, November 24, 2016 11:18 AM

Task:
DOD (Degree of Difficulty):
Estimated Hours:

Original Description of the SIG Request:
The login should not display lower case letters if the Caps Lock is on. If that cannot be changes, at least display a warning that Caps Lock is on.

Note:
The Common Services and Framework (CSF) login screen displays a message if Caps Lock is turned on:
''Caps Lock is On
Having Caps Lock may cause you to enter your password incorrectly.
You should press Caps Lock to turn it off before entering your password''



Per review/discussion with Common Services and Framework (CSF) programmer Misha today (1/26/17), he indicated that:
"Correction. Below I wrote about CapsLock notification for Password field.

We don’t have such notification on Login ID field. It is made by design as login either usual or domain is not case sensitive.

UserExtention userExtension = findByUserName(userName.toLowerCase());

So there is no mush sense to allow user to type High case symbols in Login field as they are treated equal to lower case counterparts in code."

EVALUATION: The system is designed to only display a Caps Lock warning if a field allows entry of hidden data (e.g. Password field).

Post Reply

Return to “Refused/Rejected - HIPAA/Security/Commons”