Fix system user password change doesn't take effect
This commit is contained in:
@@ -2024,10 +2024,16 @@ def edit_user(user_id):
|
|||||||
user_to_edit.role = new_role
|
user_to_edit.role = new_role
|
||||||
|
|
||||||
# Handle password update if provided
|
# Handle password update if provided
|
||||||
new_password = request.form.get('password')
|
new_password = request.form.get('new_password')
|
||||||
if new_password and new_password.strip():
|
if new_password and new_password.strip():
|
||||||
user_to_edit.set_password(new_password)
|
user_to_edit.set_password(new_password)
|
||||||
changes['password'] = 'Password updated'
|
changes['password'] = 'Password updated'
|
||||||
|
# Log password change
|
||||||
|
logger_handler.log_security_event(
|
||||||
|
event_type="admin_password_change",
|
||||||
|
description=f"Admin {session['username']} changed password for user {user_to_edit.username}",
|
||||||
|
severity="MEDIUM"
|
||||||
|
)
|
||||||
|
|
||||||
# Track changes
|
# Track changes
|
||||||
for field, old_value in old_values.items():
|
for field, old_value in old_values.items():
|
||||||
|
|||||||
Reference in New Issue
Block a user