Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Kevin Shoesmith 5 posts 25 karma points
    May 17, 2011 @ 18:24
    Kevin Shoesmith
    0

    Changing member passwords in the control panel

    This thread, now more than 2 years old, indicates that member passwords can't be changed through the Umbraco control panel UI. We're running v 4.6.1 (Assembly version: 1.0.4029.25836) and this still appears to be the case.

    Are there any plans to add this ability in future releases?

     

  • Jan Skovgaard 11280 posts 23678 karma points MVP 11x admin c-trib
    May 17, 2011 @ 21:41
    Jan Skovgaard
    0

    Hi Kevin

    Ehm...when you say Umbraco control panel do you then mean the dashboard in the member section? You should be able to change the members password by doing it directly on the member in Umbraco.

    If you want a list of members on the dashboard it should be a matter of creating a user control that makes this possible (If you possess the proper C# skills and have some knowledge of the Umbraco API) and use it as the dashboard by configuring it in the dashboard.config file found in the "config" folder on the filesystem.

    In the referenced thread it seems they discuss the option of saving password in hashed format or clear text (I just skimmed, so could be missing the point completely) and I can't connect it too what you're asking? :-)

    Hope the above helps - otherwise don't hesitate to explain the issue with further detail.

    /Jan

  • Kevin Shoesmith 5 posts 25 karma points
    May 18, 2011 @ 23:46
    Kevin Shoesmith
    0

    Hey Jan,

    Thanks for the reply. Yes, I mean the dashboard in the member section. When I select a member, the profile comes up with a Password label and beside it: "The current MemberShip Provider does not support changing password (EnablePasswordRetrieval need to be true)".

    When I set EnablePasswordRetrieval to true in the web.config, I get an error about not being able to retrieve hashed passwords. That makes sense. But it seems that we should be able to change a member's password anyway, regardless of whether we see the existing one. 

    Doesn't it make sense that we could enter a new password and confirmation (plus the existing pw for security sake), and update it that way?

    K

  • Jan Skovgaard 11280 posts 23678 karma points MVP 11x admin c-trib
    May 19, 2011 @ 07:17
    Jan Skovgaard
    0

    Hi Kevin

    I'm not sure I follow...

    Have you made a dashboard to get a overview of the members yourself or are you meaning when you select a member from one of the member folders and you're seeing the "properties" tab and member details like name, created by, created, id, login, password (this should be a link, which gives two input fields when clicked), e-mail and member group...is this what you see when you're trying to change the password?

    Otherwise if possible I would like to see a screendump of what it is you see if it does not contain any information that is too sensitive to share in public of course.

    /Jan

  • Tom Fulton 2030 posts 4998 karma points c-trib
    May 19, 2011 @ 13:48
    Tom Fulton
    1

    Hi Kevin,

    On my 4.7 install I am able to change the password of a member using the Members section, by clicking the member in the tree, going to the Properties tab, and clicking Change Password. Are you following these steps or using some type of custom dashboard as Jan describes?

    This is my provider setting in web.config

            <add name="UmbracoMembershipProvider" type="umbraco.providers.members.UmbracoMembershipProvider" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" defaultMemberTypeAlias="SiteMember" passwordFormat="Hashed" umbracoApprovePropertyTypeAlias="mIsApproved" umbracoLockPropertyTypeAlias="mIsLocked" />

    -Tom

Please Sign in or register to post replies

Write your reply to:

Draft