aboutsummaryrefslogtreecommitdiffstats
path: root/settings/Controller
diff options
context:
space:
mode:
authorJoas Schilling <coding@schilljs.com>2016-10-25 13:05:13 +0200
committerLukas Reschke <lukas@statuscode.ch>2016-11-18 12:10:50 +0100
commit2fd2e45e428b24f16b7724b7a31d660ba67d2ef1 (patch)
treec6e77f9f796e25d38bef8cf401d1945429becd45 /settings/Controller
parent410e0fc28f25835c4b10e31066b641387cb53391 (diff)
downloadnextcloud-server-2fd2e45e428b24f16b7724b7a31d660ba67d2ef1.tar.gz
nextcloud-server-2fd2e45e428b24f16b7724b7a31d660ba67d2ef1.zip
Require password confirmation for user management
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'settings/Controller')
-rw-r--r--settings/Controller/ChangePasswordController.php1
-rw-r--r--settings/Controller/GroupsController.php2
-rw-r--r--settings/Controller/UsersController.php3
3 files changed, 6 insertions, 0 deletions
diff --git a/settings/Controller/ChangePasswordController.php b/settings/Controller/ChangePasswordController.php
index e43d0d8f343..832cdbefdbe 100644
--- a/settings/Controller/ChangePasswordController.php
+++ b/settings/Controller/ChangePasswordController.php
@@ -131,6 +131,7 @@ class ChangePasswordController extends Controller {
/**
* @NoAdminRequired
+ * @PasswordConfirmationRequired
*
* @param string $username
* @param string $password
diff --git a/settings/Controller/GroupsController.php b/settings/Controller/GroupsController.php
index feed45b118e..8985a76ec95 100644
--- a/settings/Controller/GroupsController.php
+++ b/settings/Controller/GroupsController.php
@@ -95,6 +95,7 @@ class GroupsController extends Controller {
}
/**
+ * @PasswordConfirmationRequired
* @param string $id
* @return DataResponse
*/
@@ -128,6 +129,7 @@ class GroupsController extends Controller {
}
/**
+ * @PasswordConfirmationRequired
* @param string $id
* @return DataResponse
*/
diff --git a/settings/Controller/UsersController.php b/settings/Controller/UsersController.php
index 4c732a94c9a..89831a66aba 100644
--- a/settings/Controller/UsersController.php
+++ b/settings/Controller/UsersController.php
@@ -301,6 +301,7 @@ class UsersController extends Controller {
/**
* @NoAdminRequired
+ * @PasswordConfirmationRequired
*
* @param string $username
* @param string $password
@@ -433,6 +434,7 @@ class UsersController extends Controller {
/**
* @NoAdminRequired
+ * @PasswordConfirmationRequired
*
* @param string $id
* @return DataResponse
@@ -616,6 +618,7 @@ class UsersController extends Controller {
*
* @NoAdminRequired
* @NoSubadminRequired
+ * @PasswordConfirmationRequired
*
* @param string $username
* @param string $displayName