jambonz / jambonz/jambonz-api-server
The view_only user should be able to change his temporary password
Open
- Dominant language
- JavaScript
- Stars
- 24
- Forks
- 38
- Avg merge
- 8h 34m
- Merged PRs (30d)
- 1
Description
when a user creates a view only user and creates a temporary password, when the new user logs in it offers to change the temporary password, but since the user is view only the system is not allowing to change the temporary password
Contributor guide
No contributing guide indexed for this repository
Research direction
No file, test, or entry point is identified in the issue. Reproduce the temporary-password login flow for a view-only user, then trace the permission check that blocks the password change; done means the user can set a new password without gaining other permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authentication, authorization
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100