J3 Issue ?
avatar 810
810
13 Oct 2018

Steps to reproduce the issue

Create new admin account, check reset password on next login.

Login backend with the new account. You get the edit user account, to change the password. But when you save then you get the error.

Looks like the security fix broke the edit password check feature on the backend.

Expected result

Password saved.

Actual result

Error

An error has occurred.
403 Access Denied

System information (as much as possible)

J3.8.13

Additional comments

avatar 810 810 - open - 13 Oct 2018
avatar joomla-cms-bot joomla-cms-bot - change - 13 Oct 2018
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 13 Oct 2018
avatar 810 810 - change - 13 Oct 2018
Title
J3.8.13 backend edit password isse
J3.8.13 backend edit password issue
avatar 810 810 - edited - 13 Oct 2018
avatar infograf768
infograf768 - comment - 14 Oct 2018

Looks like same issue in staging/3.9.0RC

avatar infograf768 infograf768 - change - 14 Oct 2018
Labels Added: ?
avatar infograf768 infograf768 - labeled - 14 Oct 2018
avatar infograf768
infograf768 - comment - 14 Oct 2018

Setting as release blocker

avatar infograf768 infograf768 - change - 14 Oct 2018
Labels Removed: ?
avatar infograf768 infograf768 - unlabeled - 14 Oct 2018
avatar infograf768
infograf768 - comment - 14 Oct 2018

Testing again and I can't reproduce on staging.

avatar brianteeman brianteeman - change - 14 Oct 2018
Labels Added: J3 Issue
avatar brianteeman brianteeman - labeled - 14 Oct 2018
avatar zero-24
zero-24 - comment - 14 Oct 2018

I can not reproduce this with the given instructions too. Can you please a bit more precise which user with what access data you have created and is it possible to reproduce this on a 3.8.13 clean install?

Looks like the security fix broke the edit password check feature on the backend.

Well it should not as nothing in this direction has been touched. Please check: 27ca70a

avatar brianteeman
brianteeman - comment - 14 Oct 2018

I can not reproduce this with the given instructions too.

avatar PhilETaylor
PhilETaylor - comment - 14 Oct 2018

I can not reproduce this with Joomla 3.8.13 on a live site.

avatar 810
810 - comment - 14 Oct 2018

I can't reproduce the issue on new installs.
I got the issue on a clients website.

Mhh got it now, looks like admin tools was blocking it.

avatar PhilETaylor
PhilETaylor - comment - 14 Oct 2018

looks like admin tools was blocking it.

screenshot 2018-10-14 at 12 47 47

Disabling the editing of Joomla Users in the backend is a standard feature of @nikosdion Admin Tools, that gets applied (IIRC) when you run the "Quick start wizard" in Admin Tools.

This is not a Joomla core issue then.

avatar 810 810 - change - 14 Oct 2018
Status New Closed
Closed_Date 0000-00-00 00:00:00 2018-10-14 11:48:20
Closed_By 810
avatar 810 810 - close - 14 Oct 2018

Add a Comment

Login with GitHub to post a comment