Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
Unknown
-
Description
Currently, the "Change password" button will be hidden in a user profile only if this user is created from the LDAPÂ application (https://github.com/xwiki/xwiki-platform/blob/bd82be936c21b65dee367d558e3050b9b6995713/xwiki-platform-core/xwiki-platform-user/xwiki-platform-user-profile/xwiki-platform-user-profile-ui/src/main/resources/XWiki/XWikiUserPreferencesSheet.xml#L323)
The goal of this issue is to provide some kind of API that authenticators can use to disable the "Change password" button for user profiles they create.
A simple implementation would be to allow the authenticator to declare a list of classes that will be present on user profiles created by this authenticator. For example, the OpenID Connect authenticator could declare the XWiki.OIDC.UserClass class. Then, if a user profile has an object of one of the declared classes, the change password button is not displayed.
This can cause a problem for some authenticators, such as trusted headers, who don't add any object to the profile.