[Koha-bugs] [Bug 33461] Password reset should act like patron expiration when there are no notices available

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33461

--- Comment #2 from Christopher Brannon <cbrannon at cdalibrary.org> ---
(In reply to Katrin Fischer from comment #1)

> I am not sure where a code would come in and how would it be communicated to
> the user?

If staff set the reset for a patron, we are usually confirming the patron
through other means (via photo id or questions via phone).  If the system sees
that there is no email or text, it could generate the code and put it in place
of the password, and the staff can tell the patron what that code is.

This guarantees that only the person they verified with can reset the password,
not just someone that might have access to the link.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.