Skip to content

User authenticated with Token authentication provider should not be able to change password #49865

@azasypkin

Description

@azasypkin

Currently Change Password API in Elasticsearch allows user to change password even if they are authenticated with Token authentication provider, but this will change with elastic/elasticsearch#48752 and we should make necessary changes in Kibana as well.

Blocked by: elastic/elasticsearch#48752

Metadata

Metadata

Assignees

Labels

Feature:Security/AuthenticationPlatform Security - AuthenticationTeam:SecurityPlatform Security: Auth, Users, Roles, Spaces, Audit Logging, etc t//

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions