Remove Password Tab from User Preferences

moep · March 20, 2018, 2:48pm

Is there an easy way to remove the Password Tab (@@change_password) from the User Preferences (@@personal-preferences) in Plone 5.1?

I have set up LDAP and the users are not able to change the password via Plone.

espenmn · March 20, 2018, 3:09pm

The lazy way is with this CSS,

#contentview-user_data-change-password { display: none}

moep · March 20, 2018, 3:21pm

I thought more of a configuration option, but this works. Thanks!

idgserpro · March 20, 2018, 7:18pm

There's a caveat in this approach: if the user knows this url, he can try to directly enter it in the browser.

One way to avoid this is using overrides.zcml since in Plone 5.1 @@change-password (not @@change_password is a view:

github.com

plone/plone.app.users/blob/2.4.1/plone/app/users/browser/configure.zcml#L32


    />


<browser:page
    name="new-user"
    for="plone.app.layout.navigation.interfaces.INavigationRoot"
    class=".register.AddUserForm"
    permission="plone.app.controlpanel.UsersAndGroups"
    />


<browser:page
    name="change-password"
    for="plone.app.layout.navigation.interfaces.INavigationRoot"
    class=".passwordpanel.PasswordPanel"
    permission="cmf.SetOwnPassword"
    />


<browser:page
    name="personal-preferences"
    for="plone.app.layout.navigation.interfaces.INavigationRoot"
    class=".personalpreferences.PersonalPreferencesPanel"
    permission="cmf.SetOwnProperties"

https://docs.plone.org/develop/addons/components/zcml.html#overrides

I didn't test it, but I would try to use the overrides approach, just changing the permission attribute of the view to cmf.ManagePortal, so if the user tries to enter it will receive an "Insufficient permissions" message.

You can do more overrides to give a message instead of this but it may be overkill.

moep · March 21, 2018, 7:24am

Thank you for your input. I am aware of the implications of the CSS approach. Additionally I removed the "Set own password" Right from Authenticated Users via Zope.