AML(System & Operations):Unactivated users is able to click "Activate account" link multiple times and set the password.

Unactivated users is able to click "Activate account" link multiple times and set the password..

Steps:

1.Create unactivated user through groovy scripts

groovy create-user.groovy -ah http://aq-qa-tomcat1:8080/sapi/rest/ -u atul.sanagar@thesearchagency.com -ra reseller1 -d "Testing thesearch" -r sales -l en -c u
.
.

PLEASE DO NOT REPLY TO THIS EMAIL<br>
This email is generated automatically, and is not monitored for responses.
</BODY>
</HTML>

DEBUG - --------------------

INFO - Activation email sent! Please check your inbox

2.Email has been received in inbox of user 'atul.sanagar@thesearchagency.com'

Activation link

http://reseller1.aq-qa-tomcat1:8080/reseller?uuid=ed03e290-4a5a-43fe-b0f5-4bbca665d537&token=X2CU34D5NWDJUTDFOAYCNL4W5EODJXG3KQ2BFZHHAQB3I4YCXPSFRZBN2V5LAQHLLTCO26MIDHYPRJRTEQPVH7K7MXGGP55VBOXVPCSKA7GDVIQBFDS4QBIACFNWZMESNSMBB5EQZKSYD5HTPNZJJI2W5O2FYKRNPTOVRDQNBJ6MWHV6PD27UV5GKCVO6QFIWAZL3UHYXRL3DZKFCA5Q5EJBZVASLTXJAWO46EHUZH35FDFGPOLVAOAZCM5PTEHDJLVXUL64SKWZSIFM7HRQHRFSWZHXM4TKZHHFUDWD6X5NBIRSBD6XU4RDAQPGL6TSNTAGBKFOCAIRCL3MCAJFDURTRU======#ACTIVATION

3.Click the activation link and Activation page is displayed.

4.Enter Password and Confirm password and SUBMIT.

5.Confirmation message is sent to user's email address.

6.Now re-click on the same Activation link, it displays Activation page

Observations :

User is able to re-enter Password/Confirm password on this page which sent confirmation message. And with this password user is able to Login to reseller UI.

Expected :

When user clicks Activate Link second time,considering that he has already activated by entering passwords, Activation Page shouldn't be displayed. We can display user message something like - user is already activated...