Password (field) is not cleared when a different user is logging into GMWEB when user's credentials are stored in Google Chrome's or Internet Explorer's save password feature

Version 1

    Details

    Password (field) is not cleared when a different user is logging into GMWEB when user's credentials are stored in Google Chrome's or Internet Explorer's save password feature

    [PRE-REQUISIT]
    Having 2 users with the same password in this below scenario MW and MICHAELA and password test123


    [STEPS TO PREPARE]
    1. Start GoldMine Web website in Google Chrome
    2. In the Logon mask enter username MW and password test123
    3. Check Remember me 
    4. Sign in
    5. Google Chrome will ask if the username and password should be stored >> YES

    6. Once signed in and availability of GoldMine Web is confirmed >> Sign Out of GoldMine Web
    7. Close the Browser window


    [STEPS TO REPRODUCE]

    1. Start GoldMine Web website
    2. Verify that the login details are pre-filled (upon the Remember me check box from Steps to prepare 3. with MW and *********** as password
    3. Enter MICHAELA into user name
    4. Observe the password field
    >> RESULT: nothing changes, usually on all web pages with logon fields and also as secure and best practice the password field clears visible to the end user so that the current user's information needs to be entered

     
    5. In order to check if maybe this is only a display behavior and the password field only does still show as populated but is not anymore >> Sign in
    >> RESULT: MICHAELA is able to sign in without entering his password which means that the user would now also know the MW password



    Resolution


    [DISCUSSION]

    - This is solely due to saving the password for MW in the Google Chrome's/Internet Explorer's manage/save password storage and behaves the same way for other web sites under same conditions for example web mail access where 2 mailboxes have the same password.
    - This does not happen when the Remember me check box is selected but the password not saved in Google Chrome/Internet Explorer



    >> IT IS ABSOLUTELY RECOMMENDED TO SAVE PASSWORD FEATURE OF GOOGLE CHROME/INTERNET EXPLORER ONLY WHEN ONLY ONE USER HAS USUALLY ACCESS TO THE MACHINE AND OTHER USERS WILL NOT HAVE ACCESS 

    [STEPS TO DELETE THE STORED CREDENTIAL IN GOOGLE CHROME]
    Either
    1. Start GoldMine Web website in Google Chrome
    2. In the Logon page at Google Chrome's address bar >> There appears a key symbol


    3. Click on the key icon
    4. Click the X right beside the current credentials


    5. Done
    6. Verify the behavior


    Or
    1. Open Google Chrome
    2. Customize and control Google Chrome icon >> Settings
    3. Show advanced settings
    4. Section Passwords and forms
    5. Manage passwords link in Offer to save your web passwords


    6. Highlight and press the X (delete) on the password


    7. Done
    8. Verify the behavior


    [STEPS TO DELETE THE STORED CREDENTIAL IN INTERNET EXPLORER]
    1. Open Internet Explorer
    2. Icon Options (ALT + X)
    3. Internet Options
    4. Tab General
    5. Button Delete in the Browsing History section
    6. For deleting ONLY the passwords >> Uncheck everything but Password


    7. Delete
    8. OK
    9. Verify the behavior