[mythtv-commits] Ticket #13274: Can't change admin password in WebFrontend

[MythTV]

#13274: Can't change admin password in WebFrontend
-----------------------------------+-----------------------------
 Reporter:  Bill Meek              |          Owner:  Bill Meek
     Type:  Bug Report - General   |         Status:  closed
 Priority:  minor                  |      Milestone:  30.0
Component:  MythTV - Web Frontend  |        Version:  Master Head
 Severity:  medium                 |     Resolution:  fixed
 Keywords:                         |  Ticket locked:  0
-----------------------------------+-----------------------------

Comment (by Bill Meek <billmeek@…>):

 In [changeset:"f3de8a1fccc900807e14a5916d56c1687c764f4a/mythtv"
 f3de8a1fc/mythtv]:
 {{{
 #!CommitTicketReference repository="mythtv"
 revision="f3de8a1fccc900807e14a5916d56c1687c764f4a"
 Services API: Adds ManageDigestUser and ManageUrlProtection endpoints

 * Myth/ManageDigestUser:

 Restores the ability to change the admin password from Webfrontend
 and any clients that may have digest users.

 Adds new options to add and remove users, but prevents removal of
 user "admin".

 Myth/ManageDigestUser has 3 values for the Action parameter:

     Add requires: UserName, Password and AdminPassword

     Remove requires: UserName and Password

     ChangePassword requires: UserName, Password and OldPassword

 Note that adding user: abcd and: ABCD are considered the same.
 Something unexpected in MythSessionManager testing here.

 Fixes #13274

 * Myth/ManageUrlProtection:

 Gives users the ability to configure which services require a
 digest user/password:

     Requires: AdminPassword and Services, All, None, Myth;Dvr etc.

     Command line examples, to turn on protection for all services:

         curl --digest --user admin:mythtv --data Services=All \
              --data AdminPassword=mythtv \
              localhost:6544/Myth/ManageUrlProtection

         wget -O- --http-user=admin --http-password=mythtv \
              --method=POST \
 localhost:6544/Myth/ManageUrlProtection?Services=All\&AdminPassword=mythtv

              [--post-data doesn't work]

 Tested WebFrontend authentication on: Android Chrome 66.0, Chromium
 65.0/66.0, Firefox 60.0. Python requests/requests.auth with
 HTTPDigestAuth work.

 Note the addition of the new verb "Manage", which allows consolidation
 of multiple POST methods (thanks Roger.) This adds to the "Naming
 standardization" in commit: ce52b5e in 11/11/2011. The Action parameter
 should honor the Add and Remove verbs previously established. If any of
 the above, or in the future, need to retrieve data, then a similar Get-
 endpoint would need to be added using the GET method.
 }}}

-- 
Ticket URL: <https://code.mythtv.org/trac/ticket/13274#comment:3>
MythTV <http://www.mythtv.org>
MythTV Media Center