Page MenuHomePhabricator

Allow passwords to be edited even if `account.editable` is `false`
ClosedPublic

Authored by epriestley on Aug 21 2014, 7:45 PM.
Tags
None
Referenced Files
F13180467: D10331.diff
Thu, May 9, 12:08 AM
Unknown Object (File)
Fri, Apr 12, 3:17 AM
Unknown Object (File)
Mar 24 2024, 10:22 AM
Unknown Object (File)
Mar 17 2024, 10:35 AM
Unknown Object (File)
Mar 15 2024, 6:57 AM
Unknown Object (File)
Feb 14 2024, 4:28 PM
Unknown Object (File)
Feb 9 2024, 1:36 PM
Unknown Object (File)
Jan 29 2024, 10:56 PM
Subscribers

Details

Summary

Fixes T5900. We have some very old code here which does not let you update your password if the account.editable flag is set.

This was approximately introduced in D890, and I think it was mostly copy/pasted at that point. I'm not sure this ever really made sense. The option is not documented as affecting this, for example. In the modern environment of auth providers, it definitely does not make sense.

Instead, always allow users to change passwords if the install has a password provider configured.

Test Plan
  • Set account.editable to false.
  • Used a password reset link.

Diff Detail

Repository
rP Phabricator
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

epriestley retitled this revision from to Allow passwords to be edited even if `account.editable` is `false`.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: btrahan.
btrahan edited edge metadata.
This revision is now accepted and ready to land.Aug 21 2014, 10:26 PM
epriestley updated this revision to Diff 24875.

Closed by commit rP4a566f9e5d8d (authored by @epriestley).