diff options
author | Frédéric Buclin <LpSolit@gmail.com> | 2016-02-23 23:50:26 +0100 |
---|---|---|
committer | Frédéric Buclin <LpSolit@gmail.com> | 2016-02-23 23:50:26 +0100 |
commit | bb909eae7218de25805d80a442c6c59e89760df9 (patch) | |
tree | 4d6d93177847980c117f5ef928cb6e96bf2b4145 | |
parent | b241244b33f920514c2a84a0c98279aa7158f200 (diff) | |
download | bugs-bb909eae7218de25805d80a442c6c59e89760df9.tar bugs-bb909eae7218de25805d80a442c6c59e89760df9.tar.gz bugs-bb909eae7218de25805d80a442c6c59e89760df9.tar.bz2 bugs-bb909eae7218de25805d80a442c6c59e89760df9.tar.xz bugs-bb909eae7218de25805d80a442c6c59e89760df9.zip |
Bug 1250354: The "Forgot password" link should not be displayed if users are not allowed to change it
r/a=dkl
-rw-r--r-- | template/en/default/account/auth/login-small.html.tmpl | 48 |
1 files changed, 25 insertions, 23 deletions
diff --git a/template/en/default/account/auth/login-small.html.tmpl b/template/en/default/account/auth/login-small.html.tmpl index 65aa861a1..a1a074372 100644 --- a/template/en/default/account/auth/login-small.html.tmpl +++ b/template/en/default/account/auth/login-small.html.tmpl @@ -27,8 +27,6 @@ <a id="login_link[% qs_suffix %]" href="[% script_url FILTER html %]" onclick="return show_mini_login_form('[% qs_suffix %]')">Log In</a> - [% Hook.process('additional_methods') %] - <form action="[% login_target FILTER html %]" method="POST" class="mini_login bz_default_hidden" id="mini_login[% qs_suffix FILTER html %]"> @@ -56,24 +54,28 @@ <a href="#" onclick="return hide_mini_login_form('[% qs_suffix %]')">[x]</a> </form> </li> -<li id="forgot_container[% qs_suffix %]"> - <span class="separator">| </span> - <a id="forgot_link[% qs_suffix %]" href="[% script_url FILTER html %]#forgot" - onclick="return show_forgot_form('[% qs_suffix %]')">Forgot Password</a> - <form action="token.cgi" method="post" id="forgot_form[% qs_suffix %]" - class="mini_forgot bz_default_hidden"> - <label for="login[% qs_suffix FILTER html %]">Login:</label> - <input name="loginname" size="20" id="login[% qs_suffix FILTER html %]" required - [% IF login_not_email %] - placeholder="Your Login" - [% ELSE %] - type="email" placeholder="Your Email Address" - [% END %]> - <input id="forgot_button[% qs_suffix %]" value="Reset Password" - type="submit"> - <input type="hidden" name="a" value="reqpw"> - <input type="hidden" id="token[% qs_suffix FILTER html %]" name="token" - value="[% issue_hash_token(['reqpw']) FILTER html %]"> - <a href="#" onclick="return hide_forgot_form('[% qs_suffix %]')">[x]</a> - </form> -</li> + +[% Hook.process('additional_methods') %] + +[% IF user.authorizer.can_change_password %] + <li id="forgot_container[% qs_suffix %]"> + <span class="separator">| </span> + <a id="forgot_link[% qs_suffix %]" href="[% script_url FILTER html %]#forgot" + onclick="return show_forgot_form('[% qs_suffix %]')">Forgot Password</a> + <form action="token.cgi" method="post" id="forgot_form[% qs_suffix %]" + class="mini_forgot bz_default_hidden"> + <label for="login[% qs_suffix FILTER html %]">Login:</label> + <input name="loginname" size="20" id="login[% qs_suffix FILTER html %]" required + [% IF login_not_email %] + placeholder="Your Login" + [% ELSE %] + type="email" placeholder="Your Email Address" + [% END %]> + <input id="forgot_button[% qs_suffix %]" value="Reset Password" type="submit"> + <input type="hidden" name="a" value="reqpw"> + <input type="hidden" id="token[% qs_suffix FILTER html %]" name="token" + value="[% issue_hash_token(['reqpw']) FILTER html %]"> + <a href="#" onclick="return hide_forgot_form('[% qs_suffix %]')">[x]</a> + </form> + </li> +[% END %] |