[ome-users] Prevent a user from changing their own password?

[Josh Moore]

On Oct 16, 2013, at 1:16 PM, Will Moore wrote:

> Hi John,
> 
> Will you be providing this account username and password to external users, to log in with Insight / web? 
> If so, then I don't know of a way you can currently prevent them changing their password, although others might have some ideas.

The most straightforward way to prevent password changes at the moment is by hosting the user in LDAP. Further, an LDAP user won't be disallowed from making modifications to name, email, etc., but changes will not persist if LDAP synchronization is turned on.

The next best alternative would be to provide your own PasswordProvider extension, though this won't provide any protection to name, email, etc. fields.

Another more complicated possibility would be to directly add triggers to the DB to disallow such changes.

Cheers,
~Josh


> In the case where we have "public" user exposed via auto-login through the web framework, the user never gets to know their password or to log in, and we prevent them visiting the webadmin pages via a url filter as described
> https://www.openmicroscopy.org/site/support/omero4/developers/Web/PublicData.html
> 
> 
> Cheers,
> 
>  Will. 
> 
> 
> 
> On 16 Oct 2013, at 11:53, John Webber (NBI) wrote:
> 
>> Hi all,
>> 
>> We are planning to have an external Omero user account that can be used to view (read-only) images in our Omero instance.    Is it possible to lock down this user account within Omero, so that the user is not able to change their own password?  We would envisage that a password change should only be done by an administrator – is this something that can be achieved?
>> 
>> Thanks
>> John
>> 
>> 
>> 
>> -------------------------------------------------------------------------------------------------------------------------------------------- 
>> John Webber
>> Computing and Information Services
>> NBI Partnership Ltd
>> Norwich Research park
>> Colney Lane
>> Norwich
>> NR4 7UH
>> 
>> E-Mail: john.webber at nbi.ac.uk
>> Web:     http://www.nbi.ac.uk
>> Tel:         +44(0)1603 450 818
>> 
>> Helpdesk (Tel):  1234      HPC Support (Web):       http://hpc.nbi.ac.uk  (NBI  internal)
>>                                                HPC Support (Tel):           2003  (NBI internal)
>> 
>> The NBI Partnership Ltd provides non-scientific services to the Institute of Food Research, the John Innes Centre, The Genome Analysis Centre and The Sainsbury Laboratory
>> 
>> _______________________________________________
>> ome-users mailing list
>> ome-users at lists.openmicroscopy.org.uk
>> http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users
> 
> _______________________________________________
> ome-users mailing list
> ome-users at lists.openmicroscopy.org.uk
> http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users