#2870: require password when changing email

ckan · Feb 10, 2016 · 816c25a · 816c25a
1 parent 3c6f828
commit 816c25a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ckan/controllers/user.py b/ckan/controllers/user.py
@@ -323,7 +323,7 @@ def _save_edit(self, id, context):
             context['message'] = data_dict.get('log_message', '')
             data_dict['id'] = id
 
-            if data_dict['password1'] and data_dict['password2']:
+            if (data_dict['password1'] and data_dict['password2']) or data_dict['email']:
                 identity = {'login': c.user,
                             'password': data_dict['old_password']}
                 auth = authenticator.UsernamePasswordAuthenticator()