Merge pull request #52239 from nextcloud/backport/50465/stable29

AndyScherzinger · web-flow · commit cdc308c30848 · 2025-04-23T22:33:56.000+02:00
[stable29] fix: Check that user actually can validate password for js
diff --git a/lib/private/Template/JSConfigHelper.php b/lib/private/Template/JSConfigHelper.php
@@ -86,7 +86,7 @@ public function getConfig(): string {
 
 			$backend = $this->currentUser->getBackend();
 			if ($backend instanceof IPasswordConfirmationBackend) {
-				$userBackendAllowsPasswordConfirmation = $backend->canConfirmPassword($uid);
+				$userBackendAllowsPasswordConfirmation = $backend->canConfirmPassword($uid) && $this->canUserValidatePassword();
 			} elseif (isset($this->excludedUserBackEnds[$this->currentUser->getBackendClassName()])) {
 				$userBackendAllowsPasswordConfirmation = false;
 			}

Original file line number	Diff line number	Diff line change
`@@ -86,7 +86,7 @@ public function getConfig(): string {`
`86`	`86`
`87`	`87`	`$backend = $this->currentUser->getBackend();`
`88`	`88`	`if ($backend instanceof IPasswordConfirmationBackend) {`
`89`		`- $userBackendAllowsPasswordConfirmation = $backend->canConfirmPassword($uid);`
	`89`	`+ $userBackendAllowsPasswordConfirmation = $backend->canConfirmPassword($uid) && $this->canUserValidatePassword();`
`90`	`90`	`} elseif (isset($this->excludedUserBackEnds[$this->currentUser->getBackendClassName()])) {`
`91`	`91`	`$userBackendAllowsPasswordConfirmation = false;`
`92`	`92`	`}`