Details
-
Type:
Bug
-
Status: Reopened
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 2.1.0
-
Fix Version/s: All Time Backlog
-
Component/s: Merchant UI, Reseller UI
-
Labels:None
-
Environment:
QA Environment 2
• Reseller UI - RC 1 Build 1
• Merchant UI - RC 1 Build 1
• SAPI - Master Build 705
-
Sprint:Sprint 8 - Cumberland, High Priority
Description
Steps:
1.Access Reseller UI login page
URL : http://amlntttesting.aq-qa2-front1:9990/reseller/#LOGIN
2.Click on forgot password and enter email address of any of the merchants - it displays Email sent.
PFA: AML_ForgotPassword_ResellerUI.GIF
Merchant user has received reset password email and he can reset the password although he is NOT a reseller.
mysql> SELECT * FROM merchants WHERE contact_email='atul.sanagar@thesearchagency.com';
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| id | reseller_id | customer_id | realm_id | group_id | user_id | name | display | description | created_on | created_by | created_by_name | modified_on | modified_by | modified_by_name | active | comments | url | phone | contact_name | contact_phone | contact_email |
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| 3cd1161e-2d78-4ad6-829e-f32f4de4da49 | 93b20f00-a9f9-4f4b-9a22-349daba14dfd | 9999999 | com.thesearchagency/93b20f00-a9f9-4f4b-9a22-349daba14dfd/3cd1161e-2d78-4ad6-829e-f32f4de4da49 | a1d5cef9-3b20-4b24-9b3a-3c5ae7168458 | ebd14325-517c-4e8c-9f67-4753bcf1ea54 | 9999999 | 9999999 | NULL | 2013-04-29 07:01:02 | 28f75ace-0eb5-4106-afbe-453e746e0e91 | QA Reseller Admin User | 2013-04-29 07:01:02 | 28f75ace-0eb5-4106-afbe-453e746e0e91 | QA Reseller Admin User | T | NULL | NULL | atul.sanagar@thesearchagency.com |
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)
3.Now access Merchant UI of the realm "amlntttesting"
http://amlntttesting.aq-qa2-front1:9990/merchant/#LOGIN
4.Click on forgot password and enter email address of any of the reseller - it displays Email sent.
PFA: AML_ForgotPassword_MerchantUI.GIF
Reseller user has received reset password email and he can reset the password although he is NOT a merchant
mysql> SELECT * FROM resellers WHERE contact_email='atul.sanagar@rediffmail.com';
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| id | realm_id | group_id | user_id | name | display | description | created_on | created_by | created_by_name | modified_on | modified_by | modified_by_name | active | comments | url | phone | contact_name | contact_phone | contact_email |
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| 93b20f00-a9f9-4f4b-9a22-349daba14dfd | com.thesearchagency/93b20f00-a9f9-4f4b-9a22-349daba14dfd | 88ddfc79-7db5-4e85-a9ad-1414ca886992 | 28f75ace-0eb5-4106-afbe-453e746e0e91 | amlntttesting | QA AMLNTT Testing | 2013-04-25 06:18:30 | c7542d20-f6ba-4784-842b-9202a92190e2 | TSA Administrator | 2013-04-25 06:18:30 | c7542d20-f6ba-4784-842b-9202a92190e2 | TSA Administrator | T | http://www.amlntttesting.com | 1234567894 | QA Reseller Admin User | 1234567890 | atul.sanagar@rediffmail.com |
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)
Expected result :
As we are validating if Reseller is trying to Login Merchant or vice versa - AML-1357, we should validate it on forgot password page of ResellerUI/MerchantUI.
