-
Notifications
You must be signed in to change notification settings - Fork 520
Open
Description
Describe the bug
A vanilla installation of DSpace Angular displays demo user credentials on the landing page. These credentials are intended for the official demo site but appear in a standard installation where the accounts do not exist.
Displayed content:
The test user accounts below have their password set to the name of this software in lowercase.
Demo Site Administrator = dspacedemo+admin@gmail.com
Demo Community Administrator = dspacedemo+commadmin@gmail.com
Demo Collection Administrator = dspacedemo+colladmin@gmail.com
Demo Submitter = dspacedemo+submit@gmail.com
This is misleading in a clean install and gives the impression of insecure default credentials.
Observed in: All versions DSpace Angular
To Reproduce
- Perform a standard (vanilla) DSpace backend + Angular UI installation.
- Start the Angular frontend.
- Open the landing page.
- Observe the demo credential block displayed.
Expected behavior
A default installation should not display demo credentials.
Demo-specific content should only appear in the official demo environment or behind an explicit demo configuration.
Related work
None known.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Type
Projects
Status
👀 Needs Discussion / Analysis