starred/tacticalrmm

Fork 0

mirror of https://github.com/amidaware/tacticalrmm.git synced 2026-04-26 15:05:57 +03:00

[GH-ISSUE #686] Feature Request: Ability for users to reset their own passwords #2385

New issue

Closed

opened 2026-03-14 03:48:18 +03:00 by kerem · 7 comments

kerem commented

2026-03-14 03:48:18 +03:00

Owner

Originally created by @r3die on GitHub (Sep 2, 2021).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/686

Is your feature request related to a problem? Please describe.
Users cannot change their own passwords without having the 'Manage User Accounts' permission which would give them the ability to change other user passwords as well.

Describe the solution you'd like
'Change Password' option upon signing in for users without the 'Manage User Accounts' permission/ 'Forgot Password' option prior to login.

Originally created by @r3die on GitHub (Sep 2, 2021). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/686 **Is your feature request related to a problem? Please describe.** Users cannot change their own passwords without having the 'Manage User Accounts' permission which would give them the ability to change other user passwords as well. **Describe the solution you'd like** 'Change Password' option upon signing in for users without the 'Manage User Accounts' permission/ 'Forgot Password' option prior to login.

kerem

2026-03-14 03:48:18 +03:00

closed this issue
added the
bug

fixed
labels

kerem commented

2026-03-14 03:48:34 +03:00

Author

Owner

@iTQuanNet commented on GitHub (Sep 3, 2021):

I don't think this is a good suggestion. There is a certain risk. The password and token can be reset by the administrator. The user only needs to confirm with the administrator.

@iTQuanNet commented on GitHub (Sep 3, 2021): I don't think this is a good suggestion. There is a certain risk. The password and token can be reset by the administrator. The user only needs to confirm with the administrator.

kerem commented

2026-03-14 03:48:39 +03:00

Author

Owner

@r3die commented on GitHub (Sep 3, 2021):

I don't think it is unreasonable for users to have the ability to change their own passwords. Every Enterprise platform has this functionality- in fact I find it less secure that I am creating passwords for technical users that they cannot change. To mitigate your concern, as long as they don't have the 'Manage User Accounts' permission the Global/Super admin can still go in and lock their account if they are terminated from the organization.

@r3die commented on GitHub (Sep 3, 2021): I don't think it is unreasonable for users to have the ability to change their own passwords. Every Enterprise platform has this functionality- in fact I find it less secure that I am creating passwords for technical users that they cannot change. To mitigate your concern, as long as they don't have the 'Manage User Accounts' permission the Global/Super admin can still go in and lock their account if they are terminated from the organization.

kerem commented

2026-03-14 03:48:44 +03:00

Author

Owner

@wh1te909 commented on GitHub (Sep 3, 2021):

yea this is more like a bug than a feature request, users should already be able to reset their own passwords. will fix

@wh1te909 commented on GitHub (Sep 3, 2021): yea this is more like a bug than a feature request, users should already be able to reset their own passwords. will fix

kerem commented

2026-03-14 03:48:49 +03:00

Author

Owner

@r3die commented on GitHub (Sep 3, 2021):

@wh1te909 Sounds good- Are standard users intended to perform the action by right clicking on their user account within Settings>User Administration?

@r3die commented on GitHub (Sep 3, 2021): @wh1te909 Sounds good- Are standard users intended to perform the action by right clicking on their user account within Settings>User Administration?

kerem commented

2026-03-14 03:48:54 +03:00

Author

Owner

@wh1te909 commented on GitHub (Sep 3, 2021):

@wh1te909 Sounds good- Are standard users intended to perform the action by right clicking on their user account within Settings>User Administration?

yep

@wh1te909 commented on GitHub (Sep 3, 2021): > @wh1te909 Sounds good- Are standard users intended to perform the action by right clicking on their user account within Settings>User Administration? yep

kerem commented

2026-03-14 03:48:59 +03:00

Author

Owner

@wh1te909 commented on GitHub (Sep 4, 2021):

changes pushed, will be in next release

@wh1te909 commented on GitHub (Sep 4, 2021): changes pushed, will be in next release

kerem commented

2026-03-14 03:49:05 +03:00

Author

Owner

@wh1te909 commented on GitHub (Sep 6, 2021):