Comment 1 for bug 1422492

Revision history for this message
Aaron Wells (u-aaronw) wrote : Re: Mahara doesn't ask you for your password before deleting your account or changing your username

Indeed, if we wanted to be more secure, we could consider asking for password, and/or sending out email notifications, when certain user actions take place. I think maybe a good rule of thumb, is any action that can prevent you from being able to log in. So that would be:

1. Changing your password (we already ask for your current password for this)
2. Changing your username
3. Changing your primary email address (because this can make it impossible to recover your password)
4. Deleting your own account