How to disable Can't access your account? url from login page of stash application

How to disable Can't access your account? url from login page of stash applicationlogin.jpg

4 answers

This widget could not be displayed.

Hi Ankur,

Currently there is an issue open for it: https://jira.atlassian.com/browse/STASH-4458

I advise you to add yourself as a watcher to it.

Best regards,
Thiago Bomfim
Atlassian Support

This widget could not be displayed.

What is the ETA of fixing this issue - https://jira.atlassian.com/browse/STASH-4458
As I haven't seen any progress on this issue 

This widget could not be displayed.

Hi Ankur,

Atlassian has a policy for bug fixing:

I encourage you to leave your feedback on that issue which is continually being monitored by our dev team and as I mentioned, is fixed according to the document I linked you above.

Best regards,
Thiago Bomfim
Atlassian Support

This widget could not be displayed.

Hi Ankur,

Our development team explained why it would be a concern to provide an option to hide the link 'Can't access your account':

  1. as of Stash 3.5, the user is already provided with sufficient information to understand why the password can or cannot be resetted and what's the follow-up action he/she should perform:
    • if the user's account is from a editable directory (in practice that means "Stash Internal Directory"), the user is notified that a link was sent to the account's email to reset its password;
    • if the user's account is from a read-only directory, the user is notified of why the account's password cannot be resetted and that he/she could contact his/her administrator to change it;
    • if the user's account does not exist, the user is notified that the account was not found and that he/she would verify the provided account name or email;
  2. additionally, except in the rare case where all the directories are external directories, Stash has usually one editable internal directory (because it is created by default when Stash is setup). And the users in that directory (such as the administrative account created during the setup) needs to be able to reset their accounts' passwords. If the link Can't access your account link was removed from the login page, our concern is that it would allow some (potentially critical) users to completely lock themselves out of Stash, without any mean to reset their passwords.

Please refer to https://jira.atlassian.com/browse/STASH-4458 for full discussion.

Note that Stash is 'read-only' for users fetched from external directories, meaning they can only be changed in the external directory itself and not using Stash UI.

We hope that this answer clarifies the decision.

Best regards,
Thiago Bomfim

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Aug 21, 2018 in Bitbucket

Branch Management with Bitbucket

As a project manager, I have discovered that different developers want to bring their previous branching method with them when they join the team. Some developers are used to performing individual wo...

1,345 views 8 11
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you