breber / cdcsite Goto Github PK

Right now every user in the database is an admin, and can change usernames, passwords and names. This doesn't seem right...

In order to change a user password, they should need to type in the old password. We can check to see if they are right before allowing the change. Right now, the passwords are being displayed in the value field of the textbox.

It says we can remove that class.

I think that means that we can remove the functionality allowing any user with access to the Directory tab on the website to edit any other user's information.

The mike user probably should be in there, but it is added at the start of the application.

Verify that we can remove that user.