TFA disable screen cancel button always redirects to current user TFA page

Created on 27 October 2023, 8 months ago
Updated 5 November 2023, 8 months ago

Problem/Motivation

There is a redirect bug when click the cancel button on the TFA disable form of a user other than the current one. It will be redirected to the current user rather than the one is editing.
The issue with this is if the admin pressed cancel to check something or because they werenโ€™t sure, then they go back to disable, they might not realise they are now on their own profile and could potentially disable their TFA if they arenโ€™t paying attention.

Steps to reproduce

  1. Find the user whoโ€™s TFA you want to disable.
  2. Click disable TFA.
  3. Click cancel.
  4. It takes you back to your TFA page, not the userโ€™s TFA page you were on.

Proposed resolution

Update cancelForm function on the TfaDisableForm.php to redirect to the account ID instead of the current user ID.

Remaining tasks

User interface changes

API changes

Data model changes

๐Ÿ› Bug report
Status

Closed: duplicate

Version

1.2

Component

Code

Created by

๐Ÿ‡ฆ๐Ÿ‡บAustralia yeniatencio

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.69.0 2024