FUDforum: FUDforum Suggestions » Settings: Require password only to update required information

Home » FUDforum » FUDforum Suggestions » Settings: Require password only to update required information

Show: Today's Messages :: Polls :: Message Navigator

Settings: Require password only to update required information [message #31185]

Thu, 06 April 2006 21:52

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

Currently to change the "optional" settings in User CP -> Settings, users are required to enter a password.

It makes sense to require a password entry to change a password or email address, but not for the other stuff.

I'd like to see the form edits configured so that changing the "required" information continues to require a password, while changing the "optional" information does not.

Report message to a moderator

Re: Settings: Require password only to update required information [message #31188 is a reply to message #31185]

Fri, 07 April 2006 00:35

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

I do not think it is a good idea. Plus it becomes difficult to determine what is "critical" and non-critical settings as far as use or not use password restriction.

FUDforum Core Developer

Report message to a moderator

Re: Settings: Require password only to update required information [message #31199 is a reply to message #31188]

Fri, 07 April 2006 16:30

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

Ilia wrote on Thu, 06 April 2006 17:35

I do not think it is a good idea. Plus it becomes difficult to determine what is "critical" and non-critical settings as far as use or not use password restriction.

You already have the form separated into "required" and "optional". It seems logical to me that the former should require a password, while the latter should not.

Report message to a moderator

Re: Settings: Require password only to update required information [message #31211 is a reply to message #31199]

Sun, 09 April 2006 17:21

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

Not really, some of the non-required parameters are fairly important, while "required" for the most part are trivial.

FUDforum Core Developer

Report message to a moderator

Re: Settings: Require password only to update required information [message #31219 is a reply to message #31211]

Sun, 09 April 2006 19:45

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

Ilia wrote on Sun, 09 April 2006 10:21

Not really, some of the non-required parameters are fairly important, while "required" for the most part are trivial.

??
Being able to log in (password) and retrieve a lost password (email address) are trivial?? From my perspective they're the only important ones; anything else that gets messed up is easy to fix.

Report message to a moderator

Re: Settings: Require password only to update required information [message #31238 is a reply to message #31219]

Mon, 10 April 2006 21:11

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

You cannot retrieve an old password, you can only change it and that requires knowledge of the existing password.

User's name for example and user's alias are relatively trivial and benign settings.

FUDforum Core Developer

Report message to a moderator

Re: Settings: Require password only to update required information [message #31258 is a reply to message #31238]

Wed, 12 April 2006 15:53

Astoria

Messages: 227
Registered: April 2004

Karma: 0

Senior Member

Ilia wrote on Mon, 10 April 2006 14:11

You cannot retrieve an old password, you can only change it and that requires knowledge of the existing password.

User's name for example and user's alias are relatively trivial and benign settings.

But, right now everything requires a password. It would still be better to only require it to change those four things than the current arrangement.

Report message to a moderator

Re: Settings: Require password only to update required information [message #161950 is a reply to message #31258]

Tue, 23 February 2010 19:25

Seewolf

Messages: 1
Registered: February 2010

Karma: 0

Junior Member

Isn't there yet a patch to switch off that a password is required for changing non-critical information? My users will find this pretty annoying and this could totally kill the acceptance of FUFforum.

Report message to a moderator

Re: Settings: Require password only to update required information [message #161951 is a reply to message #161950]

Tue, 23 February 2010 19:32

naudefj

Messages: 3772
Registered: December 2004

Karma: 28

Senior Member
Administrator
Core Developer

Seewolf wrote:

Isn't there yet a patch to switch off that a password is required for changing non-critical information.

Nope. Can you maybe do it for us?

Report message to a moderator

Re: Settings: Require password only to update required information [message #162139 is a reply to message #161951]

Wed, 24 March 2010 15:16

littleking

Messages: 187
Registered: January 2007

Karma: 2

Senior Member

I too think it would be a great patch to release

Report message to a moderator

Aw: Re: Settings: Require password only to update required information [message #162912 is a reply to message #162139]

Sat, 28 August 2010 22:00

JanRei

Messages: 361
Registered: October 2005
Location: Germany

Karma: 0

Senior Member
Contributing Core Developer
Translator

I made note of this topic to have a look into the suggestion. With the attached patch only changes of the required information (name and mail address) require a password. Changing the optional information do not require a password anymore. Please have a look at it whether this is how it should work.

On this occassion I also tried to fix the display of custom avatars: http://fudforum.org/forum/index.php?t=msg&th=119198