Skip to content

Read only user prevent password change #6494

Closed Locked Answered by shamoon
bwicksall asked this question in Support
Discussion options

You must be logged in to vote

Fun to learn our software will be used like this 😊

The short answer is no, not at the configuration level. But what I do for the demo is to block it at the reverse-proxy level (actually for the demo i block it at the cloudflare level, but the same principle applies). Something like:

(http.request.uri.path contains "/api/profile" and http.request.method in {"POST" "PUT" "DELETE" "PATCH"})

This will effectively prevent editing the user and doesn’t have any negative effects otherwise

Replies: 3 comments 1 reply

Comment options

You must be logged in to vote
1 reply
@bwicksall
Comment options

Answer selected by bwicksall
Comment options

You must be logged in to vote
0 replies
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants