TA accounts can change students passwords even when forbidden

buggyrace / buggy-race-server

Race server and supporting material for running a "Buggy Racing" Python programming project

https://www.buggyrace.net

Other

1 stars 0 forks source link

Closed davewhiteland closed 1 year ago

davewhiteland commented 1 year ago

Looks like IS_TA_PASSWORD_CHANGE_ENABLED is not being honoured in the password page logic.

davewhiteland commented 1 year ago

Closed by bbcddad