mahara-contributors team mailing list archive

[Kristina Hoeppner <1222200@xxxxxxxxxxxxxxxxxx>]

the admin can circumvent having to put it a new password by clicking the
link "log in anyway". I think it is good to have this screen as it is
(maybe make the option to log in without having to change password more
prominent) because then the admin could test the password change
functionality and is also reminded that they log in as another user.

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1222200

Title:
  Admin forced to change users password when masquerading as another
  user

Status in Mahara ePortfolio:
  New

Bug description:
  Admin logs into the site and creates a new user, specifying a username and password. 
  He visits the new users profile page, and clicks the 'Log in as' button.
  Admin gets the 'Change password screen' with the message 'You are required to change your password before you can proceed.'

  Only the actual user should see the change password screen, and not
  the mahara site admin.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1222200/+subscriptions