Skip to content

Add ChangeOwnPassword method for self-service password changes #525

Merged
jinapurapu merged 3 commits intominio:mainfrom
jinapurapu:changeOwnPassword
Jan 27, 2026
Merged

Add ChangeOwnPassword method for self-service password changes #525
jinapurapu merged 3 commits intominio:mainfrom
jinapurapu:changeOwnPassword

Conversation

@jinapurapu
Copy link
Copy Markdown
Contributor

Summary

  • Add ChangeOwnPassword method to allow users to change their own password
  • This endpoint bypasses IAM policy checks, enabling password changes even with explicit deny on
    admin:CreateUser

Motivation

Previously, changing a user's password required the admin:CreateUser permission via
SetUser/AddUser. This made it impossible for users to change their own password if they had an
explicit deny on that action. The new dedicated endpoint allows self-service password changes without
elevated permissions.

@jinapurapu jinapurapu self-assigned this Jan 26, 2026
@jinapurapu jinapurapu added the bug Something isn't working label Jan 26, 2026
@harshavardhana
Copy link
Copy Markdown
Member

ChangeMyPassword is perhaps a better API name.

@jinapurapu jinapurapu merged commit fc60864 into minio:main Jan 27, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants