Solved How does a user change their password

[dualarrow]

I have tried clicking the username at the top right of the users panel page and selecting "Security Settings" then "Change Password", I enter the current password, then my new password and I get back

Failed to change password

and

Access denied. You don't have the required permissions

I had a look through the "Security & Sessions" panel settings and couldn't see anything obvious.

Can anyone offer a solution.

 

[admin]

Hello,

Thank you for reporting this, and sorry for the trouble.

This was a permissions error. As a security measure, the panel refuses requests from user and reseller accounts on routes that are not on its list of trusted routes. The route the "Change Password" form uses was missing from that list, so the change was refused with "Access denied. You don't have the required permissions". ROOT and admin accounts were not affected, which is why it went unnoticed.

We have added the route to the trusted list, and you can now change your password safely: the panel takes the account from your own login session and checks your current password before saving the new one.

The fix is already in the beta updates: set Panel Settings > System Updates > Update Channel to "Stable + Beta" (https://your-server:8443/panel-settings#system_updates) and apply the updates. It will be released to the stable channel on Wednesday, once testing of the updates is finished.

Thank you.