ansible/awx

User cannot change password

Open

#9.195 geöffnet am 29. Jan. 2021

Auf GitHub ansehen
 (10 Kommentare) (0 Reaktionen) (0 zugewiesene Personen)Python (3.333 Forks)batch import
component:apiflag:communityhelp wantedtype:bug

Repository-Metriken

Stars
 (13.071 Stars)
PR-Merge-Metriken
 (Durchschn. Merge 24T 6h) (30 gemergte PRs in 30 T)

Beschreibung

ISSUE TYPE
  • Bug Report
SUMMARY

I asked around a bit in irc first, but we were unable to figure this out.

How can a user account (normal, non-ldap, regular plain user account) change their own password?

I want the user to change their password, not the admin to change it for them.

I do not see any option in the UI (AWX 16.0.0).

The API allows for /api/v2/me but only GET requests. This value returns 41 for the user I'm testing with. Then we try POST to /api/v2/users/41 with data { "password": "testing" } using curl --user 'username:password' and we get the response:

{"detail":"You do not have permission to perform this action."}

But... I'M the user! It's my password?!

I also can't change other attributes such as POST to /api/v2/users/41 with data { "last_name": "testing" } with the same response from the API.

How does this work? What's going on here?

ENVIRONMENT
  • AWX version: 16.0.0
  • AWX install method: kubernetes
  • Operating System: macos high sierra
  • Web Browser: curl (chrome)
EXPECTED RESULTS

Users have a method to change their password.

ACTUAL RESULTS

Users do not have a method to change their password.

Contributor Guide