Allow Admin to change user`s password

[Vincent Bergeron]

Hi!

I plan to use the Firebase email/password authentication.

I read some posts and docs about it and I have something that bothers me.

Can an Admin change a user password?

All the API docs I see require the old password to be provided. That`s ok on a user side, but on an Admin side, it worth nothing.

Lets say that a user quits the company. We want to keep it`s user "active" for some time, because we want to consult his data. We can`t change it`s email and use the "Reset password" feature because we also need the old password to do it...

Well, I'm a little perplex about this mechanism...

THanks

VB

[Kato Richardson]

Hello Vincent,

You can't reset a password without the current password (e.g. as an Administrator). This is something we'd like to add.

You can control access to data with any criteria you want. To disable users, you could simply add something like disabled: true into the users' profiles and refer to that in your security rules. For example:

".read": "!root.child('users/' + auth.uid + '/disabeld').exists()"

I hope that helps!

Kato

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/9920973b-301c-4e0f-b7d0-4fa4d5b0e3f8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.