mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
c5d0672c68
An administrator resets a password to close an account someone else took over, but the API tokens stayed valid: a stolen token kept working with the new password, for as long as it was made to last. Setting a password on the user's Password page now deletes that user's tokens, and the page says so. A user who changes their own password keeps their tokens (scripts keep working); they can delete them on their profile. |
||
|---|---|---|
| .. | ||
| group_form.html | ||
| group_list.html | ||
| group_member.html | ||
| logs.html | ||
| tombstone_list.html | ||
| user_form.html | ||
| user_list.html | ||
| user_password_form.html | ||