User management: password change, admin-created users, project members #15

New issue

Closed

opened 2026-10-14 23:16:42 -04:00 by vmanne-poc · 0 comments

vmanne-poc commented

2026-10-14 23:16:42 -04:00

Owner

There is no way to manage users today:

users can't change their password; the root password only applies when the root user is first created
an admin can't add people to a project (only the creator is a member)
no password reset

Scope

Change password (authenticated, requires current password)
Admin creates users; project owners add/remove members by email
Pairs with POSTAK_DISABLE_REGISTRATION=true for an invite-only setup

Password reset by email is a follow-up (needs a system sender).

There is no way to manage users today: - users can't change their password; the root password only applies when the root user is first created - an admin can't add people to a project (only the creator is a member) - no password reset **Scope** - Change password (authenticated, requires current password) - Admin creates users; project owners add/remove members by email - Pairs with `POSTAK_DISABLE_REGISTRATION=true` for an invite-only setup Password reset by email is a follow-up (needs a system sender).

vmanne-poc added this to the Phase 8: Dependency security & user management (v0.8.0) milestone

2026-10-14 23:16:42 -04:00

vmanne-poc added the

feature

security

labels

2026-10-14 23:16:42 -04:00

vmanne-poc referenced this issue from a commit

2026-10-14 23:48:21 -04:00

Add user management: password change, admin-created users, project members

vmanne-poc referenced this issue from a pull request that will close it,

2026-10-14 23:48:49 -04:00