-
Type: Feature Request
-
Status: Scheduled
-
Priority: Minor
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: 5.3.0
-
Component/s: Security
-
Labels:None
-
Change Log Group:Added
-
Change Log Message:Added ability for administrators to reset their password.
-
Story Points:2
-
Copy Issue Key:
-
Patch Instructions:
Plan:
- change "u:OnResetLostPassword" event to call "$this->setNextTemplate($event);" at the end - 0.3h
- on "/login.tpl" template move code in <inp2:m_if check="m_Param" name="http_auth"> block, that is located after footer div into same IF in main page part - 0.2h
- create "/designs/without_login_design.tpl" design based on "/login.tpl" template, where configurable part would be rendered inside <inp2:m_if check="m_Param" name="http_auth"> IF statement - 0.4h
- refactor "/login.tpl" template to use "/designs/without_login_design.tpl" design - 0.1h
- modify the "u:OnForgotPassword" event to: - 0.4h
- when used from Admin Console, then allow resetting password of Administrators only (UserType=1)
- when used from Front-End, then allow resetting password of Regular users only (UserType=0)
- create "/login/forgot_password_reset_notice.tpl" template (use "/designs/without_login_design.tpl" design) like template with same name from "advanced" theme, that will: - 0.5h
- show heading & text (create missing admin phrases with adapted from Front-End texts)
- show link/button for going back to homepage (that internally would redirect to login page anyway)
- create "/login/forgot_password_reset.tpl" template (use "/designs/without_login_design.tpl" design) like template with same name from "advanced" theme, that will: - 0.5h
- show heading & text (create missing admin phrases with adapted from Front-End texts)
- show inputs for entering new password
- have "next_template" hidden field with "index" value
- have button, that would submit form with "u.forgot:OnResetLostPassword" event
- create "/login/forgot_password.tpl" template (use "/designs/without_login_design.tpl" design) like template with same name from "advanced" theme, that: - 0.5h
- allows entering username/e-mail via single field
- have "template_success" hidden field with "login/forgot_password_reset_notice" value
- have "reset_confirm_template" hidden field with "login/forgot_password_reset" value
- have single button, that once pressed will submit the form using "u:OnForgotPassword" event
- add "Forgot Password?" link (only when "DBG_RESET_ROOT" constant isn't defined) to the bottom of Admin Console login form, that once clicked would redirect to "/login/forgot_password.tpl" template - 0.1h
Quote: 3h*1.4 (doing) + 1h (quoting) = 5h