TFA disable screen cancel button always redirects to current user TFA page

Created on 27 October 2023, about 1 year ago
Updated 5 November 2023, about 1 year ago

Problem/Motivation

There is a redirect bug when click the cancel button on the TFA disable form of a user other than the current one. It will be redirected to the current user rather than the one is editing.
The issue with this is if the admin pressed cancel to check something or because they weren’t sure, then they go back to disable, they might not realise they are now on their own profile and could potentially disable their TFA if they aren’t paying attention.

Steps to reproduce

  1. Find the user who’s TFA you want to disable.
  2. Click disable TFA.
  3. Click cancel.
  4. It takes you back to your TFA page, not the user’s TFA page you were on.

Proposed resolution

Update cancelForm function on the TfaDisableForm.php to redirect to the account ID instead of the current user ID.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Closed: duplicate

Version

1.2

Component

Code

Created by

🇦🇺Australia yeniatencio

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024