Federated users should not see change password page

[Elvin Tubillara]

Federated users see the change password page in settings.
They should not be able to see this page since they are not able
to do so since their passwords are not stored on the local service provider Keystone (because their passwords/credentials are managed by the identity provider).

[David Lyle (david-lyle)]

is the thought to use the is_federated flag to hide the panel? https://github.com/openstack/django_openstack_auth/blob/master/openstack_auth/user.py#L197

[Gary W. Smith (gary-w-smith)]

Per https://docs.openstack.org/keystone/latest/advanced-topics/federation/federated_identity.html#mapping-combinations, federated users are either local or ephemeral, and IIUC this restriction would only apply to ephemeral users. This is related to bug 163552.