Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password-update command is redundant and behaves inconsistently to password-set #219

Closed
izmalk opened this issue Nov 29, 2023 · 1 comment

Comments

@izmalk
Copy link

izmalk commented Nov 29, 2023

Problem to Solve

  1. Password-update is redundant when we have password-set that can do the same.
  2. Password-update asks for the Old password first, while password-set does not.

Current Workaround

> user password-update
Old password: ***
New password: ***
> user password-set admin
New password: ***
Set password for user 'admin'
Please login again with your updated password.

Proposed Solution

One of the following:

  1. Make password-update useful by implementing different user roles (so that all users can change their own password).
  2. Remove password-update and use password-set instead.
  3. At the very least, make them both work similarly to each other. No need to check the old password in password-update if we used this password to connect with the current user.

Additional Information

Currently, any user can change the password for any user, which is a completely different problem.

@dmitrii-ubskii
Copy link
Member

Password-set allows the admin to set any user's password, password-update allows the user to update their own password.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants