Bug 55740 - Teachers cannot reset password of students with unsaved default values of additional extended attributes
Teachers cannot reset password of students with unsaved default values of add...
Status: NEW
Product: UCS@school
Classification: Unclassified
Component: UMC - Password reset
UCS@school 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS@school maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-02-22 14:29 CET by Christina Scheinig
Modified: 2024-03-13 12:49 CET (History)
6 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.343
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023020921000237, 2023082221000228, 2023092621000166
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christina Scheinig univentionstaff 2023-02-22 14:29:21 CET
If you install OX in a school environment (but probably also other apps that bring new attributes) then teachers can no longer reset student passwords. The popup "Permission Denied" appears.
This is because the teacher does not have permission to save the values of the new attributes. If an admin opens the student whose password should be reset, you will get the popup "New attribute, default value will be saved if...". If you do this, teachers can reset the student's password again.
Comment 1 Daniel Tröder univentionstaff 2023-02-23 09:57:29 CET
As a work around, the default value can be set on all users, using a simple listener module.
Comment 2 Dirk Schnick 2023-04-04 11:57:41 CEST
This bug is tricky. It raises if an update or installation sets default values on userobjects which are not allowed to change by the teacher or schooladmin. To find this reason is tricky for support, partners and customers.

I see the trouble that it may be necessary to set values during an installation or update, but this must be done in a way that will not break main features in UCS@school like passwordreset of students by a teacher.
Comment 3 Christina Scheinig univentionstaff 2023-04-13 09:25:46 CEST
(In reply to Daniel Tröder from comment #1)
> As a work around, the default value can be set on all users, using a simple
> listener module.

Writing a listener module is not a practical workaround for support or the customer
Comment 4 Jan-Luca Kiok univentionstaff 2023-04-17 14:17:13 CEST
(In reply to Christina Scheinig from comment #3)
> 
> Writing a listener module is not a practical workaround for support or the
> customer

I agree and have removed the assessment - Reading the definition of "Waiting Support" this bug is qualified for the flag, do you want it to be set?
Comment 6 Mirac Erdemiroglu univentionstaff 2024-01-11 15:05:52 CET
Another customer affected 2023082221000228

Feedback for all
Customer was affected with UCS 4.4-9
After the update to UCS 5 the customer is not affected anymore from this bug.