4.2. User - Change password
| Id | 4.2. |
| Description |
As a Generic User
So that I can keep my account secure |
| Priority | High |
| Actors | User |
| API Calls | N/A |
| Linked Processes | |
| Status | Implemented - Only user with access to django-admin use password authentication, and therefore only these users can perform a password change via UI. API users, use API keys and don't have passwords to manage. |
Preconditions
- The User must be authenticated.
- The User must known his old password
Postconditions
- The System returns a confirmation that the password has been reset.
Main flow
- The User triggers a credential change via the django-admin UI.
- The system returns a confirmation indicating the the password has been updated.
Exceptions
[400 Bad Request] Invalid input:
If mandatory fields are missing or invalid, the system returns an error message.
[500 Internal Server Error] System Error
If the system fails to save changes due to an internal error, it displays an appropriate message and logs the error for further investigation.