ansible/awx

User cannot change password

Open

#9 195 ouverte le 29 janv. 2021

Voir sur GitHub
 (10 commentaires) (0 réactions) (0 assignés)Python (3 333 forks)batch import
component:apiflag:communityhelp wantedtype:bug

Métriques du dépôt

Stars
 (13 071 stars)
Métriques de merge PR
 (Merge moyen 24j 6h) (30 PRs mergées en 30 j)

Description

ISSUE TYPE
  • Bug Report
SUMMARY

I asked around a bit in irc first, but we were unable to figure this out.

How can a user account (normal, non-ldap, regular plain user account) change their own password?

I want the user to change their password, not the admin to change it for them.

I do not see any option in the UI (AWX 16.0.0).

The API allows for /api/v2/me but only GET requests. This value returns 41 for the user I'm testing with. Then we try POST to /api/v2/users/41 with data { "password": "testing" } using curl --user 'username:password' and we get the response:

{"detail":"You do not have permission to perform this action."}

But... I'M the user! It's my password?!

I also can't change other attributes such as POST to /api/v2/users/41 with data { "last_name": "testing" } with the same response from the API.

How does this work? What's going on here?

ENVIRONMENT
  • AWX version: 16.0.0
  • AWX install method: kubernetes
  • Operating System: macos high sierra
  • Web Browser: curl (chrome)
EXPECTED RESULTS

Users have a method to change their password.

ACTUAL RESULTS

Users do not have a method to change their password.

Guide contributeur