nextcloud/server

Trigger password reset email from user management

Open

#14,411 opened on Feb 27, 2019

View on GitHub
 (5 comments) (3 reactions) (0 assignees)PHP (34,953 stars) (4,865 forks)batch import
1. to developenhancementfeature: authenticationfeature: users and groupsgood first issuesecurity

Description

As of now the password reset email can only be triggered via the lost password page. In some cases this is disabled. It would be useful to trigger the email nevertheless as an admin from the user management.

Use case: having LDAP and DB users - LDAP users are not allowed to change the password but the reset should still be triggered by an admin for the DB users.

The email is sent here:

https://github.com/nextcloud/server/blob/ac8a6e22448cd4077e73b68731764bd60775665a/core/Controller/LostController.php#L314-L370

Contributor guide

Tech stack
php
Domain
backendsecurityauthentication
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Basic PHP knowledgeNextcloud development setupFamiliarity with LostController.php
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
The issue requests adding a way for admins to trigger password reset emails from the user management interface. The existing email sending logic is in `core/Controller/LostController.php` (lines 314-370). A new action should be added to the user management controller, possibly in `settings/Controller/UsersController.php`, to call the same email sending method. The UI would need a button or action in the user list.