Project

General

Profile

Actions
Copy link

Bug #15908

closed

Users with Deny Config Write privilege can change their own password

Bug #15908: Users with Deny Config Write privilege can change their own password

Added by Marcos M over 1 year ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Marcos M
Category:
User Manager / Privileges
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
25.07
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

A user with read-only privilege and access to System > User Password Manager is able to change its own password.

Updated by Marcos M over 1 year ago Actions
Copy link
 #1

  • Private changed from Yes to No

Updated by Marcos M over 1 year ago Actions
Copy link
 #2

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:a4d40f3e5852a3b8cd9ae19460cfe0d8429d32ea.

Updated by Lev Prokofev over 1 year ago Actions
Copy link
 #3

I checked the patch on 24.11, the user with RO privileges is not able to change the password.

The following input errors were detected:

Insufficient privileges to make the requested change (read only).

Updated by Jim Pingle over 1 year ago Actions
Copy link
 #4

  • Plus Target Version changed from 25.01 to 25.03

Updated by Jim Pingle over 1 year ago Actions
Copy link
 #5

  • Status changed from Feedback to Resolved

Updated by Jim Pingle over 1 year ago Actions
Copy link
 #6

  • Subject changed from Read-only users can change their own password to Users with Deny Config Write privilege can change their own password

Updated by Jim Pingle about 1 year ago Actions
Copy link
 #7

  • Plus Target Version changed from 25.03 to 25.07
Actions
Copy link

Also available in: Atom