Actions
Patch #21436
closed
Prevent admins from sending themselves their own password
Status:
Closed
Priority:
Normal
Assignee:
Category:
Accounts / authentication
Target version:
Start date:
Due date:
% Done:
0%
Estimated time:
Description
As an admin, when setting one's own password via Users#edit instead of via the "proper form" at My#password, there should not be an option to send the password in plaintext to oneself.
IMO, the "send account information" option is made for cases where a new login/password need to be transmitted to another user after they have been set by the admin. When setting one's own password (even as admin), there should be no reason (or possibility) to send it via email.
The attached patch solves this issue.
Files
Related issues
Updated by 
Updated by
Actions