golem15/sm-user-plugin
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Reset 2FA keeps the privileged-group guard

Browse Source 
Resetting the second factors of a privileged-group member now needs
golem15.users.manage_privileged_groups, as changing their password or
deleting them does; without it the action answers 403 before Reset.
This commit is contained in:
Jakub Zych
2026-10-26 16:04:11 +01:00
parent cc3636cea9
commit 20e7b175f8
5 changed files with 63 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lang/en/lang.yaml
View File

@@ -58,6 +58,7 @@ users:
reset_two_factor_success: Two-factor authentication of the user has been reset.
privileged_member_forbidden: This user belongs to a privileged group. You do not have permission to change their email or password. Nothing was saved.
privileged_member_delete_forbidden: Users who belong to a privileged group cannot be deleted without the permission to manage privileged groups. Nothing was deleted.
privileged_member_reset_two_factor_forbidden: This user belongs to a privileged group. Resetting their two-factor authentication needs the permission to manage privileged groups. Nothing was changed.
privileged_group_forbidden: You do not have permission to change membership of privileged groups. Nothing was saved.
user:
label: User