Skip to content
Snippets Groups Projects
Commit 31f5d1e6 authored by srosse's avatar srosse
Browse files

OO-3984: reduce the permissions of user manager to change passwords

parent 8fe3f5f6
No related branches found
No related tags found
No related merge requests found
......@@ -498,8 +498,7 @@ public class UserAdminController extends BasicController implements Activateable
private boolean isPasswordChangesAllowed(Identity identity) {
if (managerRoles.isManagerOf(OrganisationRoles.administrator, editedRoles)
|| managerRoles.isManagerOf(OrganisationRoles.rolesmanager, editedRoles)
|| managerRoles.isManagerOf(OrganisationRoles.usermanager, editedRoles)) {
|| managerRoles.isManagerOf(OrganisationRoles.rolesmanager, editedRoles)) {
// show pwd form only if user has also right to create new passwords in case
// of a user that has no password yet
if(ldapLoginModule.isLDAPEnabled() && ldapLoginManager.isIdentityInLDAPSecGroup(identity)) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment