Bugs item #2633848, was opened at 2009-02-24 15:59
Message generated for change (Comment added) made by mr-meltdown
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=482468&aid=2633848&group_id=56967

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: SQL/Core
Group: SQL "stable"
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Fabian (mr-meltdown)
Assigned to: Fabian (mr-meltdown)
Summary: SQL: unable to change password for a user

Initial Comment:
Due to the security measures of mal_authorize, it is impossible for a user to 
change his/her own password through SQL, neither is the administrator able to 
change its own password through SQL (it can only (re)set passwords of other 
users).

We should extend the ALTER USER syntax a bit to add the required "old" password 
such that we can call clients.changePassword(old, new) from SQL.

----------------------------------------------------------------------

Comment By: Fabian (mr-meltdown)
Date: 2009-05-28 22:53

Message:
This artifact has been marked as a duplicate of artifact 2794792 with
reason:
dupe

----------------------------------------------------------------------

Comment By: Niels Nes (nielsnes)
Date: 2009-05-28 22:27

Message:
reassigned to mr-meltdown

----------------------------------------------------------------------

Comment By: Fabian (mr-meltdown)
Date: 2009-03-02 19:19

Message:
PostgreSQL uses the following:

ALTER USER name RENAME TO newname

ALTER USER davide WITH PASSWORD 'xxxxxx';

ALTER USER is an alias for ALTER ROLE

----------------------------------------------------------------------

Comment By: Sjoerd Mullender (sjoerd)
Date: 2009-03-02 10:04

Message:
I'm told Oracle has
ALTER USER IDENTIFIED BY <password> [REPLACE <old_password>];

----------------------------------------------------------------------

Comment By: Fabian (mr-meltdown)
Date: 2009-02-24 16:14

Message:
currently we have:

ALTER USER user WITH PASSWORD 'string';

ALTER USER user SET SCHEMA schema;

ALTER USER user WITH PASSWORD 'string' SET SCHEMA schema;


I propose an extension like:

-- for every user to change his/her own password using the old one
CHANGE PASSWORD 'oldstring' INTO 'newstring';

and

-- root only to change username
ALTER USER user WITH USERNAME newuser;

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=482468&aid=2633848&group_id=56967

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
_______________________________________________
Monetdb-bugs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/monetdb-bugs

Reply via email to