U4-4752 - No "change password" dialog available in 7.x backoffice

Created by Anders Bjerner 23 Apr 2014, 17:25:49 Updated by Timo 29 Oct 2015, 11:49:17

Relates to: U4-3648

I can't find an existing issue for this, so here goes...

In Umbraco 6 and earlier a user could change his/her password through the dashboard in the Content section.

I have looked and looked but I haven't been able to find a similar feature in any version of Umbraco 7. Since I believe this is a must have feature, I really hope this becomes available in 7.1.2.

2 Attachments

Comments

Jan Skovgaard 23 Apr 2014, 17:38:50

Seems like the file has been placed in /umbraco/dashboard/ChangePassword.html - But it's not referenced in the dashboard.config file...but perhaps you can temporarily work around the issue by referencing the file in your config untill this issue is fixed? :)


Anders Bjerner 23 Apr 2014, 18:01:08

@JanSkovgaard Thanks. I don't have such a file at that location in 7.1.0, but there is a views/dashboard/ChangePassword.html, so adding the XML below to <section alias="StartupDashboardSection">...</section> will do the trick.

views/dashboard/ChangePassword.html

The HTML file might however need a bit of editing since the text tells the user to enter his/her current password, but doesn't have a field for it. But entering a new password (and confirmation) is enough to change the password, so that part works.

While the the "Change password" historically has been located in the dashboard of the Content section, it should perhaps be moved to the menu that is revealed when the user clicks in his/her avatar.

Anyone from the HQ who have an opinion about this?


Jan Skovgaard 23 Apr 2014, 18:10:13

Hi @abjerner - Aaah, in v7.1.1 it's in the place I wrote in my first comment. Seems like it's still work in progress :)

But I agree that it should perhaps be placed in the place you mention. If the "Edit your profile" thing could be used for non-administrators, without them seeing admin stuff in the user section apart from user-name, e-mail and password that would be ace.


Sebastiaan Janssen 28 May 2014, 09:18:02

Fixed in 84f94d6471b9e7d7c443d81862301fb6c8b755ca


Anders Bjerner 28 May 2014, 09:25:47

Awesome. Thanks Sebastiaan :D


John Churchley 28 May 2014, 13:45:34

Brilliant! Thanks


Anders Bjerner 20 Sep 2014, 16:54:35

@sebastiaan I took the liberty of reopening this issue. The password dialog ''has'' been added (and thumbs up for that), but it is located in the content section (even though is has nothing to do with content).

So editors will still have an issue if they don't have access to the content section (or user section so they can edit their own user).

I think it would be a good idea to move the change password feature out of the content section, and perhaps place it in the user sidebar (along with the "Edit" button if the user has access to that). The first screenshot illustrates how currently I see the user sidebar as an administrator, the second screenshots shows the same sidebar, but with my proposal for a "Edit profile" button and a "Change password" button. The "Edit"/"Edit profile" button should still only be displayed if the user has access to the users section (as it is now).


Douglas Robar 22 Sep 2014, 08:35:26

@abjerner I agree with you, changing a password isn't a "content" activity so should be accessible from user's avatar at the top of the screen as you've said.

I do not agree that changing a password should only be possible if the user has access to the Users section of the back office. Everyone should always have the ability to change their password. Besides, giving a user access to the Users section lets them change User Type permissions, escalate his own user type (to admin even!), and alter his user permissions. All things that most users shouldn't have access to.


Jørgen Bakke Eriksen 01 Oct 2015, 10:50:19

Both these issues are "Fixed" but we are still experiencing this in 7.2.5


Timo 29 Oct 2015, 11:49:08

I've added a pull request which adds a change password form to the user dialog as suggested by Anders Bjerner. https://github.com/umbraco/Umbraco-CMS/pull/851


Priority: Normal

Type: Bug

State: Fixed

Assignee:

Difficulty: Normal

Category:

Backwards Compatible: True

Fix Submitted: Pull request

Affected versions: 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1.1, 7.1.2, 7.1.3

Due in version: 7.1.4

Sprint:

Story Points:

Cycle: