Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deleted users can reset their password #18195

Closed
jdavcs opened this issue May 21, 2024 · 1 comment
Closed

Deleted users can reset their password #18195

jdavcs opened this issue May 21, 2024 · 1 comment
Assignees
Labels

Comments

@jdavcs
Copy link
Member

jdavcs commented May 21, 2024

Describe the bug
A deleted or deleted+purged user can reset their password. The last_password_change update triggers a new update_time value in the database.

Galaxy Version and/or server at which you observed the bug
Galaxy Version: 24.0

To Reproduce
Steps to reproduce the behavior:

  1. Create a user
  2. Log in, log out as user
  3. Log in as admin, delete or delete+purge user
  4. Reset password as user

Expected behavior
A deleted user should have their username/email recognized; password reset feature should give appropriate message.

@jdavcs
Copy link
Member Author

jdavcs commented Jan 15, 2025

Fixed in #18459

@jdavcs jdavcs closed this as completed Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

3 participants