fix: require current password when admin changes their own password (#9238)

Fixes https://github.com/jellyfin/jellyfin/issues/9208
2 years ago · e79f5d8226
parent 29c1f54b57
commit e79f5d8226
1 changed files with 1 additions and 1 deletions
--- a/Jellyfin.Api/Controllers/UserController.cs
+++ b/Jellyfin.Api/Controllers/UserController.cs
@ -277,7 +277,7 @@ namespace Jellyfin.Api.Controllers
            }
            else
            {
-                if (!User.IsInRole(UserRoles.Administrator))
+                if (!User.IsInRole(UserRoles.Administrator) || User.GetUserId().Equals(userId))
                {
                    var success = await _userManager.AuthenticateUser(
                        user.Username,