do not allow users to reset their password

Trucmuche2005

Hello,

I would like to disable the reset password functionality for users (not team members).
Is there a way to achieve this ?
If the answer is no, how can I hide all the links to pwreset.php in the user interface ?

Thank you very much for your help,

ramrajone

Trucmuche2005
You can hide it by going to login.php file line 75
change from true to false
$suggest_pwreset = true;

Trucmuche2005

Thanks ! So, I think I will have to do this modification after each update of osTicket. Is that right ? :-s :-(

ramrajone

Trucmuche2005
Correct, any changes to the core file, must keep track of, so you can apply it after the upgrade

For security reason, you may also want to rename or delete the /pwreset.php file, because power user might find a way to run that and be able to reset it