From ea89cf2549c1230eb980ca55aaf0021225e0542a Mon Sep 17 00:00:00 2001 From: Nguyen Ngo Date: Wed, 3 Sep 2025 15:49:07 -0400 Subject: [PATCH] Fix system user password change doesn't take effect --- app.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/app.py b/app.py index b9f38f8..24a6d6c 100644 --- a/app.py +++ b/app.py @@ -2024,10 +2024,16 @@ def edit_user(user_id): user_to_edit.role = new_role # Handle password update if provided - new_password = request.form.get('password') + new_password = request.form.get('new_password') if new_password and new_password.strip(): user_to_edit.set_password(new_password) changes['password'] = 'Password updated' + # Log password change + logger_handler.log_security_event( + event_type="admin_password_change", + description=f"Admin {session['username']} changed password for user {user_to_edit.username}", + severity="MEDIUM" + ) # Track changes for field, old_value in old_values.items():