Community
Participate
Working Groups
It would be great if users who forget their password could have some mechanism of resetting it.
Gosia, please take a look at it while you are polishing the user management page.
I think it is a bit too late for adding it for 0.2. I'm moving it to 0.3.
Done. Extra action on manage users avaliable.
(In reply to comment #3) > Done. Extra action on manage users available. How does it work?
From the user perspective there's a command "change password" in users table on manage-users page. Administrator may set a new password for the user. From server perspective I added an extra API in POST /users (see bug 350573), that matches user rights "administrator" should already have.
(In reply to comment #5) > From the user perspective there's a command "change password" in users table on > manage-users page. Administrator may set a new password for the user. > From server perspective I added an extra API in POST /users (see bug 350573), > that matches user rights "administrator" should already have. The end user can't even visit the manage-users page... I'm reopening this because it looks like you solved bug 350573, which is slightly different. Today the administrator can change any user's password. So, a password reset story would be: - User sends email asking admin to change password - Admin logs in, changes password, sends email to user - User logs in and changes their password However I think Denis is looking for something that doesn't require manual steps for the administrator. In his case he runs a server with 5000 users and this adds lots of overhead. The more common process is: - On the login dialog, there is a link to request a password reset - This sends an email to the user with a new temporary password. (Optional: when the temporary password is used, the user is immediately prompted to enter a new password) - User checks their email and can now log in. I'm moving this back to the inbox because this is a fair amount of work. We need to do some planning to decide if it is something we want for 0.3.
Implementing this enhancement requires some server changes (see bug 357787) and I think in this milestone is a little late for that.
I don't think this is important for 0.3.
(In reply to comment #8) > I don't think this is important for 0.3. Agree with John. We are switching to a polish stage soon and enhancements like sending emails to users and resetting passwords this way should be deferred to 0.4.
This is fixed. All we need to do is to configure email communication to set it up. Opened Bug 368273 for this.
