View Revisions: Issue #26885

Summary 0026885: Resetting password for protected user via REST API should fail
Revision 2020-04-15 20:11 by dregad
Description

Issue 0026632 introduced a new REST API endpoint to reset a user's password.

Attempting to reset a protected user's password results in an HTTP 204 No Content, but in fact the operation failed (password was not reset).

The API should inform caller of the failure, e.g. by returning a 4xx status.

Revision 2020-04-15 20:10 by dregad
Description

Issue 0026632 introduced a new REST API endpoint to reset a user's password.

Attempting to reset a protected user's password results in an HTTP 204 No Content, but in fact the operation failed (password was not reset).

The API should inform caller of the failure