From 7b7cd1ba3ba5f99438e902ebd0d40f599594ecf7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Krier?= <ced@b2ck.com>
Date: Wed, 15 Mar 2023 16:09:10 +0100
Subject: [PATCH] Do not copy password hash nor reset from user (grafted from
 c94f99afeadbc10e483ed3d34d707635f77ac945)

--HG--
branch : 6.0
---
 modules/web_user/user.py    | 7 +++++++
 trytond/trytond/res/user.py | 3 ++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/modules/web_user/user.py b/modules/web_user/user.py
index 861d54331b..be499a3576 100644
--- a/modules/web_user/user.py
+++ b/modules/web_user/user.py
@@ -152,6 +152,13 @@ class User(avatar_mixin(100), DeactivableMixin, ModelSQL, ModelView):
                 user.email = email
         cls.save(users)
 
+    @classmethod
+    def copy(cls, users, default=None):
+        default = default.copy() if default is not None else {}
+        default['password_hash'] = None
+        default['reset_password_token'] = None
+        return super().copy(users, default=default)
+
     @classmethod
     def create(cls, vlist):
         users = super(User, cls).create(vlist)
diff --git a/trytond/trytond/res/user.py b/trytond/trytond/res/user.py
index 4e87ebad7a..1cd69204ce 100644
--- a/trytond/trytond/res/user.py
+++ b/trytond/trytond/res/user.py
@@ -443,7 +443,8 @@ class User(avatar_mixin(100, 'login'), DeactivableMixin, ModelSQL, ModelView):
             default = {}
         default = default.copy()
 
-        default['password'] = ''
+        default['password_hash'] = None
+        default['password_reset'] = None
         default.setdefault('warnings')
         default.setdefault('applications')