mirror of
https://github.com/amidaware/tacticalrmm.git
synced 2026-04-26 06:55:52 +03:00
[GH-ISSUE #686] Feature Request: Ability for users to reset their own passwords #439
Labels
No labels
In Process
bug
bug
dev-triage
documentation
duplicate
enhancement
fixed
good first issue
help wanted
integration
invalid
pull-request
question
requires agent update
security
ui tweak
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tacticalrmm#439
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @r3die on GitHub (Sep 2, 2021).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/686
Is your feature request related to a problem? Please describe.
Users cannot change their own passwords without having the 'Manage User Accounts' permission which would give them the ability to change other user passwords as well.
Describe the solution you'd like
'Change Password' option upon signing in for users without the 'Manage User Accounts' permission/ 'Forgot Password' option prior to login.
@iTQuanNet commented on GitHub (Sep 3, 2021):
I don't think this is a good suggestion. There is a certain risk. The password and token can be reset by the administrator. The user only needs to confirm with the administrator.
@r3die commented on GitHub (Sep 3, 2021):
I don't think it is unreasonable for users to have the ability to change their own passwords. Every Enterprise platform has this functionality- in fact I find it less secure that I am creating passwords for technical users that they cannot change. To mitigate your concern, as long as they don't have the 'Manage User Accounts' permission the Global/Super admin can still go in and lock their account if they are terminated from the organization.
@wh1te909 commented on GitHub (Sep 3, 2021):
yea this is more like a bug than a feature request, users should already be able to reset their own passwords. will fix
@r3die commented on GitHub (Sep 3, 2021):
@wh1te909 Sounds good- Are standard users intended to perform the action by right clicking on their user account within Settings>User Administration?
@wh1te909 commented on GitHub (Sep 3, 2021):
yep
@wh1te909 commented on GitHub (Sep 4, 2021):
changes pushed, will be in next release
@wh1te909 commented on GitHub (Sep 6, 2021):
added in release 0.8.3