Scary, unnecessary security warning after fresh installation of the module. #5
Description
After installing a fresh version of Backdrop, logging into the site and then enabling the services module, a red dot shows up on the site admin bar, indicating a problem:
The user clicks the red dot, to be taken to the site reports page, and see this security error:
Clicking the "here" link on that message, takes you to admin/config/services/services-security, which is this page:
...expanding the "I understand..." fieldset, shows the following options:
Now, I understand the need for all this if you are on an old Backdrop installation, or a D7 site that was upgraded to Backdrop, but on a freshly-installed site, we are unnecessarily scaring people, which is a bad UX.
I suggest that we throw this warning only in the following situations:
- there are user accounts that have their password set to "1"
- somehow detect whether Services 7.x-3.6 was at some point installed on the site (may need a Backdrop core change, to allow flagging the site as never being D7. See [DX] Telemetry: Capture Backdrop version(s) and if upgraded from Drupal backdrop/backdrop-issues#4533)