Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-21187

Allow authenticators to disable the "Change password" password on user profiles

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Major
    • None
    • None
    • User - User Profile
    • None
    • Unknown

    Description

      Currently, the "Change password" button will be hidden in a user profile only if this user is created from the LDAP application (https://github.com/xwiki/xwiki-platform/blob/bd82be936c21b65dee367d558e3050b9b6995713/xwiki-platform-core/xwiki-platform-user/xwiki-platform-user-profile/xwiki-platform-user-profile-ui/src/main/resources/XWiki/XWikiUserPreferencesSheet.xml#L323)

      The goal of this issue is to provide some kind of API that authenticators can use to disable the "Change password" button for user profiles they create.

      A simple implementation would be to allow the authenticator to declare a list of classes that will be present on user profiles created by this authenticator. For example, the OpenID Connect authenticator could declare the XWiki.OIDC.UserClass class. Then, if a user profile has an object of one of the declared classes, the change password button is not displayed.

      This can cause a problem for some authenticators, such as trusted headers, who don't add any object to the profile.

      Attachments

        Activity

          People

            Unassigned Unassigned
            caubin Clément Aubin
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated: