Module forbidding the 'edit' operation on the User entity's 'pass' field would prevent editing security-sensitive base fields

Created on 12 December 2017, about 7 years ago
Updated 11 February 2023, almost 2 years ago

Problem/Motivation

See #2824851-197: EntityResource::patch() makes an incorrect assumption about entity keys, hence results in incorrect behavior

Proposed resolution

Remaining tasks

Update issue summary
Review code.

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Needs work

Version

10.1

Component
User module 

Last updated 7 days ago

Created by

🇧🇪Belgium wim leers Ghent 🇧🇪🇪🇺

Live updates comments and jobs are added and updated live.
  • Needs issue summary update

    Issue summaries save everyone time if they are kept up-to-date. See Update issue summary task instructions.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024