GUACAMOLE-708: Remove requirement for users to have UPDATE permission on themselves for TOTP to work.

This commit is contained in:
Michael Jumper committed 2020-06-16 20:44:12 -07:00
1 parent 47f7eb34b6
commit 4e8c9e1cb7
1 file changed
+4 -3
@@ -181,12 +181,13 @@ public class UserVerificationService {
// Update user object
try {
context.getUserDirectory().update(self);
context.getPrivileged().getUserDirectory().update(self);
}
catch (GuacamoleSecurityException e) {
logger.info("User \"{}\" cannot store their TOTP key as they "
+ "lack permission to update their own account. TOTP "
+ "will be disabled for this user.",
+ "lack permission to update their own account and the "
+ "TOTP extension was unable to obtain privileged access. "
+ "TOTP will be disabled for this user.",
self.getIdentifier());
logger.debug("Permission denied to set TOTP key of user "
+ "account.", e);