-
-
Notifications
You must be signed in to change notification settings - Fork 5.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Organization removal confirmation using name not password #14738
Conversation
Gitea is asking for user password to confirm organization removal so this operation cannot be done in systems with SSO authentication (where no user passwords are used). This mod changes the way gitea confirms organization removal - user must enter organization name (not user password) to confirm operation (similar to repository removal confirmation). Author-Change-Id: IB#1107219
FWIW i prefer the password way in scenarios where I might leave my system unattended (which rarely happens but i like safe-failure) .. and i prefer the password over name as on GitHub it wastes time assuming password manager filling the password for me. Proposing to implement this as a configuration per repository instead. |
This PR is not a nice to have feature but bugfix - without it gitea does not allow to remove organization when SSO is used without password (i.e. with reverse proxy auth only scenario). If you feel afraid of org removal accidentally then use account without access to org settings - messing with passwords in SSO scenarios seems not practical. |
This PR does not apply to repo removal but org removal. Gitea confirms repo removal using its name so its compatible with both password and SSO auth. |
Noted
My fault then! I guess i confused it with the org removal, would still argue for this to be a configurable option for org and repo. |
Translation removed from PR - will be restored using Crowdin after pull got merged. Fixes: 95ddcdd Related: go-gitea#14738 Author-Change-Id: IB#1107219
@pboguslawski pleace merge master into? Since your fork is within a org github, it do not allow us maintainer to keep your feature branch up to date to merge ... |
Just pressed "Update branch" on this PR page. |
Gitea is asking for user password to confirm organization
removal so this operation cannot be done in systems with
SSO authentication (where no user passwords are used).
This mod changes the way gitea confirms organization
removal - user must enter organization name (not user
password) to confirm operation (similar to repository
removal confirmation).
Author-Change-Id: IB#1107219