diff --git a/kfet/views.py b/kfet/views.py index 7083d489..3f5def55 100644 --- a/kfet/views.py +++ b/kfet/views.py @@ -402,7 +402,8 @@ def account_update(request, trigramme): account_form.save(data = data) # Checking perm to update password - if (request.user.has_perm('kfet.change_account_password') + if ((request.user.has_perm('kfet.change_account_password') + or request.user = account.user) and pwd_form.is_valid()): pwd = pwd_form.cleaned_data['pwd1'] pwd_sha256 = hashlib.sha256(pwd.encode('utf-8')).hexdigest()