Users can remove their passwords

[pir8radio 1312]

I see what dark posted.

[Spaceboy 2573]

But dark isn’t looking where H2P has said to look

[darkassassin07 652]

On 4/18/2020 at 5:10 PM, Spaceboy said:

But dark isn’t looking where H2P has said to look

 

 

Musta missed it in the first image:

<img removed>

Edited August 31, 2020 by darkassassin07

[Happy2Play 9780]

 

But dark isn’t looking where H2P has said to look

I would assume that is a Admin user not a User account.  You do not have a Remove Password option on any Admin user accounts.

 

But the main loophole needing closed is you can apply a new password without know the old password.

Edited April 19, 2020 by Happy2Play

[darkassassin07 652]

Regarding the remove pass button: Which is exactly what I said in post #22

Until I was told I was blind.

 

/edit

 

Sigh, I see what I missed. Non-admin users that can change their pass need the old pass to set a new one, but can remove the old pass altogether without knowing it.

Edited April 19, 2020 by darkassassin07

[pir8radio 1312]

yep i see it too...   is it in the apps too?   Can hide the button with css in the web i guess.

[rechigo 364]

[delete this, i missed the second page where h2p responded on #30 saying the same thing i did]

Edited April 19, 2020 by rechigo

[Spaceboy 2573]

yep i see it too...   is it in the apps too?   Can hide the button with css in the web i guess.

certainly in the ios app. i don't use any others to comment but i think someone posted on the 1st page it was in android too

[ebr 16181]

But the main loophole needing closed is you can apply a new password without know the old password.

 

For an individual user, i can see  that but an admin user should be able to change any user's password without knowing the current one.