jambonz / jambonz/jambonz-api-server

The view_only user should be able to change his temporary password

Open
#406 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
24
Forks
38
Avg merge
8h 34m
Merged PRs (30d)
1

Description

when a user creates a view only user and creates a temporary password, when the new user logs in it offers to change the temporary password, but since the user is view only the system is not allowing to change the temporary password

Contributor guide

No contributing guide indexed for this repository

Research direction

No file, test, or entry point is identified in the issue. Reproduce the temporary-password login flow for a view-only user, then trace the permission check that blocks the password change; done means the user can set a new password without gaining other permissions.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
authentication, authorization
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.