Plots2: Profile picture can be updated without entering password but bio cant be added

[Tlazypanda]

Please describe the problem (or idea)

In the current scenario it is possible to update the profile picture in the edit profile without entering current password but bio can't be added without entering the current password.

So either updation should be allowed without entering current password for both profile picture and bio or it should not be allowed for anything without entering current password. Important for consistency across the app.

Gif

Please show us where to look

https://publiclab.org/ ...

Thank you!

[Tlazypanda]

@VladimirMikulic @jywarren can you kindly approve? Thanks :v:

[VladimirMikulic]

I would leave it without a password, since it's not something sensitive like confirming an email, 2FA...

[Tlazypanda]

@VladimirMikulic so bio updation should be allowed without entering current password right?

[VladimirMikulic]

Make sense to me. @nstjean @cesswairimu what do you guys think?

[nstjean]

Yes I agree, they should be consistent and it doesn't need a password check.

[cesswairimu]

@jywarren @emilyashley what do you think?

[emilyashley]

Hmm, yeah, that sounds okay to me.

I think email, location, and location privacy settings are things I would expect password validation for. Are either of those editable from the bio section? (Thanks, still learning how all the pieces interact :) )

[ebarry]

Ok so this is ready to approve if we can verify that changing the account's email, changing the location, and changing the location privacy settings are behind password validation.

[ebarry]

Checked on my account:

• changing email address is behind the password.

[Tlazypanda]

@ebarry Thanks for the update! Oops my bad :sweat_smile: Maybe I can modify this pr to just allow changing the bio without password but require password for changing the email ...will have to look into this though :sweat_smile:

[stale[bot]]

Hi :smile:, this issue has been automatically marked as stale because it has not had recent activity. Don't worry you can continue to work on this and ask @publiclab/reviewers to add "work in progress" label :tada: . Otherwise, it will be closed if no further activity occurs in 5 days -- but you can always re-open it if you like! :100: Thank you for your contributions :raised_hands: :balloon:.