Skip to content

Read only user prevent password change #6494

Closed Answered by shamoon
bwicksall asked this question in Support
Discussion options

You must be logged in to vote

Fun to learn our software will be used like this 😊

The short answer is no, not at the configuration level. But what I do for the demo is to block it at the reverse-proxy level (actually for the demo i block it at the cloudflare level, but the same principle applies). Something like:

(http.request.uri.path contains "/api/profile" and http.request.method in {"POST" "PUT" "DELETE" "PATCH"})

This will effectively prevent editing the user and doesn’t have any negative effects otherwise

Replies: 2 comments 1 reply

Comment options

You must be logged in to vote
1 reply
@bwicksall
Comment options

Answer selected by bwicksall
Comment options

You must be logged in to vote
0 replies
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants