Global Privileges: Members, usergroups and forums

Post

Posted
Rating:
#7157 (In Topic #1767)

Looking for a description of feature setting.

On the page for the global Privileges: Members, usergroups and forums I found this catetory:
Member's passwords may not be reset using 'Forgot your password' feature 

I want to ensure that I don't use incorrect settings on this. I looked for a description internally (tutorial links) and then on this site, but to no avail. On the surface it seems as though, that when this setting is active for a usergroup, they are out of luck if they forget their password because they will not be able to reset it. Is that correct?

Can you please explain what this setting facilitates so that it can be known whether it should be enabled or disabled for individual user groups?

I am using version 10.0.41

Post

Posted
Rating:
Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 (Liked by Chris GrahamLiked by Keith Parker)
#7158
Hi, I imagine this setting would mean Staff would be responsible for issuing a new temporary password rather than the member directly via the form. On this website, the Forgot Password page states:- An e-mail will be sent to your e-mail address (or if you are not allowed to have your password changed via e-mail communication you will receive a message about this). I am sure Chris (or someone who has used this setting) will provide a deeper understanding of this feature at some point, because as you said there is no easily found documentation. There are a lot of scenarios where this could make sense for some usergroups but it's not something I've ever used personally :)

Post

Posted
Rating:
Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 (Liked by Keith Parker)
#7160
Adam is correct. There are situations where you might want only manual resets. Maybe it's a corporate site and you want it to get done by some internal staff. Maybe it's an account in a very highly privileged group and the small possibility of a user's email being hijacked is enough to want to ensure human verification of the reset.

Post

Posted
Rating:
Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 (Liked by Adam Edington)
#7164
Thank you!   :wub:  I wish that info was included within the the software, but your responses beautifully cleared up any guessing I was doing on my part. Much appreciated.

Post

Posted
Rating:
Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 (Liked by Keith Parker)
#7166
Documentation has been added to the v11 branch, see commit @ Documented password reset process (f8d7027c) · Commits · Composr ecosystem / Composr · GitLab ;)

Post

Posted
Rating:
#7171
Oh...Excellent to hear!
1 guest and 0 members have recently viewed this.