Admin user can not edit password

[florianvolle]

Problem description

Admin user is not able to edit his password

This is what I have in the web console

FetchError() FetchProvider.js:54 json/this.request<() FetchProvider.js:122 tryCatcher() bluebird.js:4589 [23]</module.exports/Promise.prototype._settlePromiseFromHandler() bluebird.js:2695 [23]</module.exports/Promise.prototype._settlePromiseAt() bluebird.js:2769 [23]</module.exports/Promise.prototype._settlePromises() bluebird.js:2885 [2]</Async.prototype._drainQueue() bluebird.js:175 [2]</Async.prototype._drainQueues() bluebird.js:185 Async/this.drainQueues()

Steps to reproduce the problem

1. Create new user with Admin role
2. Login with that account
3. Go to edit profile and change password
4. You receive the error message above

Environment

• Graylog Version: Graylog 2.0.0-beta.4-SNAPSHOT
• Browser version: Happens in Firefox 45.0.2 and Chrome 49

[edmundoa]

I see two problems here:

• We don't display an old password input in the form, that it is required by the server when updating the user's own password
• The server returns a 403 if the old password is missing or invalid, which triggers a redirect in the front-end. This is really annoying from the user perspective, and it's not entirely following what the API endpoint documentation says