ansible/awx

User cannot change password

Open

#9,195 opened on Jan 29, 2021

View on GitHub
 (10 comments) (0 reactions) (0 assignees)Python (3,333 forks)batch import
component:apiflag:communityhelp wantedtype:bug

Repository metrics

Stars
 (13,071 stars)
PR merge metrics
 (Avg merge 24d 6h) (30 merged PRs in 30d)

Description

ISSUE TYPE
  • Bug Report
SUMMARY

I asked around a bit in irc first, but we were unable to figure this out.

How can a user account (normal, non-ldap, regular plain user account) change their own password?

I want the user to change their password, not the admin to change it for them.

I do not see any option in the UI (AWX 16.0.0).

The API allows for /api/v2/me but only GET requests. This value returns 41 for the user I'm testing with. Then we try POST to /api/v2/users/41 with data { "password": "testing" } using curl --user 'username:password' and we get the response:

{"detail":"You do not have permission to perform this action."}

But... I'M the user! It's my password?!

I also can't change other attributes such as POST to /api/v2/users/41 with data { "last_name": "testing" } with the same response from the API.

How does this work? What's going on here?

ENVIRONMENT
  • AWX version: 16.0.0
  • AWX install method: kubernetes
  • Operating System: macos high sierra
  • Web Browser: curl (chrome)
EXPECTED RESULTS

Users have a method to change their password.

ACTUAL RESULTS

Users do not have a method to change their password.

Contributor guide