guest and impex users cannot modify password

Benjamin Renard
1 parent ca35ee3d
Showing 2 changed files with 4 additions and 0 deletions Show diff stats
js/app/AmdaApp.js
php/classes/AmdaClient.php
@@ -440,6 +440,7 @@ Ext.define(&#39;amdaApp.AmdaApp&#39;, {
 						text : 'Reset password',
 						iconCls : 'icon-resetpwd',
 						id : 'resetpwd-win-tool',
+                        disabled: isGuest || (sessionID == 'impex'),
 						handler : function(obj, e) {
 								e.stopEvent();
 								var moduleId = obj.el.id;
@@ -249,6 +249,9 @@ class AmdaClient {
 	}
  
     public function resetUserPwd($login, $crt_pwd, $new_pwd) {
+        if ($login == "impex" || str_starts_with($login, "guest")) {
+            return array('success' => false, 'message' => "You are not authorised to change this password");
+        }
         try {
 			$data_array = array(
 				"login" => $login,