Page MenuHomePhabricator

Allow passwords to be edited even if `account.editable` is `false`
ClosedPublic

Authored by epriestley on Aug 21 2014, 7:45 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Apr 28, 8:34 PM
Unknown Object (File)
Apr 23 2025, 7:05 PM
Unknown Object (File)
Apr 23 2025, 4:04 AM
Unknown Object (File)
Apr 21 2025, 12:00 PM
Unknown Object (File)
Apr 3 2025, 10:29 AM
Unknown Object (File)
Apr 1 2025, 10:48 PM
Unknown Object (File)
Mar 11 2025, 6:23 AM
Unknown Object (File)
Mar 9 2025, 10:38 AM
Subscribers

Details

Summary

Fixes T5900. We have some very old code here which does not let you update your password if the account.editable flag is set.

This was approximately introduced in D890, and I think it was mostly copy/pasted at that point. I'm not sure this ever really made sense. The option is not documented as affecting this, for example. In the modern environment of auth providers, it definitely does not make sense.

Instead, always allow users to change passwords if the install has a password provider configured.

Test Plan
  • Set account.editable to false.
  • Used a password reset link.

Diff Detail

Repository
rP Phabricator
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

epriestley retitled this revision from to Allow passwords to be edited even if `account.editable` is `false`.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: btrahan.
btrahan edited edge metadata.
This revision is now accepted and ready to land.Aug 21 2014, 10:26 PM
epriestley updated this revision to Diff 24875.

Closed by commit rP4a566f9e5d8d (authored by @epriestley).