From 2a03d090b55a84179ebab8653ba8ee32f7fcfa21 Mon Sep 17 00:00:00 2001 From: Jillian Inapurapu Date: Tue, 27 Jan 2026 11:22:36 -0800 Subject: [PATCH] Add ChangeMyPasswordAdminAction to allow blocking user from changing their own password --- policy/admin-action.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/policy/admin-action.go b/policy/admin-action.go index a4d8bc7..e9a9ef4 100644 --- a/policy/admin-action.go +++ b/policy/admin-action.go @@ -93,6 +93,8 @@ const ( DisableUserAdminAction = "admin:DisableUser" // GetUserAdminAction - allows GET permission on user info GetUserAdminAction = "admin:GetUser" + // ChangeMyPasswordAdminAction - allow changing own password + ChangeMyPasswordAdminAction = "admin:ChangeMyPassword" // Cluster Replicate Actions @@ -294,6 +296,7 @@ var SupportedAdminActions = map[AdminAction]struct{}{ EnableUserAdminAction: {}, DisableUserAdminAction: {}, GetUserAdminAction: {}, + ChangeMyPasswordAdminAction: {}, AddUserToGroupAdminAction: {}, RemoveUserFromGroupAdminAction: {}, GetGroupAdminAction: {},