users icon indicating copy to clipboard operation
users copied to clipboard

Superuser allowed to change passwords for other users

Open ironbone opened this issue 8 years ago • 4 comments

An user with is_superuser = 1 when going to ../users/users/change-password/... is all the time asked for the current password - so he/she is not able to change passwords of other users. The current password is for superuser checked in the controller

ironbone avatar Aug 03 '16 20:08 ironbone

in any case, changePassword() changes the pass of the currently logged user, so if you plan to reuse the trait to implement superuser password change for any user, it wont work. You have to do it yourself

maxmasetti avatar Sep 06 '16 12:09 maxmasetti

Thank you. But I thing it would be nice to have such functionality in the plug-in

ironbone avatar Sep 07 '16 09:09 ironbone

Let me add this as a feature

steinkel avatar Oct 03 '16 09:10 steinkel