Skip to content

🐛 Allow administrators to change other users' passwords#10891

Merged
allouis merged 1 commit intoTryGhost:masterfrom
vikaspotluri123:fix/allow-external-password-change
Jul 15, 2019
Merged

🐛 Allow administrators to change other users' passwords#10891
allouis merged 1 commit intoTryGhost:masterfrom
vikaspotluri123:fix/allow-external-password-change

Conversation

@vikaspotluri123
Copy link
Copy Markdown
Member

closes #10427

  • Administrators don't know other users' passwords, but they should be able to change other users' password
  • Don't require oldPassword to be provided

I've manually tested that Authors cannot change other users' passwords, but I'm not sure where the tests are for that; I'm not sure if I need to add any additional tests as well

closes TryGhost#10427

- Administrators don't know other users' passwords, but they should be able to change other users' password
- Don't require oldPassword to be provided
@vikaspotluri123 vikaspotluri123 changed the title 🐛 Allow administrators to change other users' passwords 🐛 Allow administrators to change other users' passwords Jul 10, 2019
@allouis allouis merged commit 2823c0b into TryGhost:master Jul 15, 2019
@vikaspotluri123 vikaspotluri123 deleted the fix/allow-external-password-change branch July 15, 2019 11:40
allouis added a commit that referenced this pull request Jul 16, 2019
* master: (24 commits)
  Version bump to 2.25.7
  Updated Ghost-Admin to 2.25.7
  Update default 404 page
  Update dependency markdown-it to v9
  💡 Bumped minimum node v8.x version to v8.10.0
  Update dependency knex to v0.19.0
  Update dependency brute-knex to v4
  Update dependency intl-messageformat to v5
  Update dependency probe-image-size to v4.1.1
  🐛 Allowed administrators to change other users' passwords (#10891)
  🐛 Fixed error message when get helper doesn't have API access (#10892)
  Update dependency intl-messageformat to v4.4.0
  Fixed typo in readme (#10885)
  Replaced v1 for v4 uuids (#10871)
  Update dependency probe-image-size to v4.0.1
  Update dependency mock-knex to v0.4.6
  Update dependency markdown-it-footnote to v3.0.2
  Update dependency lodash to v4.17.14
  Update dependency gscan to v2.6.3
  Update dependency ajv to v6.10.2
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

As an admin I'm unable to change the password of a different user

2 participants