commit 4ab009776be7b15e198a4d4fb78529acf1422e6f
author Khai Do <zaro0508@gmail.com> Fri Sep 26 10:12:43 2014 -0700
committer David Pursehouse <david.pursehouse@sonymobile.com> Wed Oct 22 08:12:09 2014 +0000
tree a6f5058f08d13f1185339dce4b04d7422cb7b7b4
parent 76623a1a56c425e87c148e2d142c16530c32fb90

Update 2.11 release notes

Mention removal of the generateHttpPassword capability.

Change-Id: I59a4aaf37bde1b9df7a5a293235847ec556cfa6a

ReleaseNotes/ReleaseNotes-2.11.txt

diff --git a/ReleaseNotes/ReleaseNotes-2.11.txt b/ReleaseNotes/ReleaseNotes-2.11.txt
index 23f3247..c12d913 100644
--- a/ReleaseNotes/ReleaseNotes-2.11.txt
+++ b/ReleaseNotes/ReleaseNotes-2.11.txt
@@ -61,7 +61,10 @@
 Other
 ~~~~~
 
-TODO
+The 'Generate HTTP Password' capability has been removed to close a
+security vulnerability.  Now only administrators are allowed to generate
+and delete other user's http passwords via the REST or SSH interface.
+We would encourage you to clean up your project.config setting after upgrading.
 
 Upgrades
 --------