Actions
Feature #91496
closed
Differentiate between password reset "by user" and "by admin"
Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend API
Target version:
-
Start date:
2020-05-26
Due date:
% Done:
100%
Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:
Description
Consider the use case, when you don't want users to be able to trigger a password recovery on their own. To make this happen, the "Password Recovery" feature (#89513) must be completely disabled.
But the system maintainers, which have access to the CLI or the Backend Users module, should still be able to start the recovery process for normal users. Without having this possibility, they must manage the user credentials "by hand" like before.
I'd love to see a possibility to configure for example [TYPO3_CONF_VARS][BE][allowPasswordResetByMaintainers] to address this use case.
What do you think?
Updated by 
Updated by 
Updated by 
Updated by
Actions