Bug 393701

Summary:	User manager applies new user avatar automatically if I take more than 30 seconds to enter my password
Product:	[Unmaintained] user-manager	Reporter:	Patrick Silva <bugseforuns>
Component:	kcontrol module	Assignee:	Jonathan Riddell <jr>
Status:	RESOLVED WORKSFORME
Severity:	normal
Priority:	NOR
Version First Reported In:	5.15.3
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Patrick Silva 2018-04-30 20:57:13 UTC

Reproucible on Arch Linux and neon dev unstale

open system settings > user details > user manager
click your avatar on right side and select a new avatar from gallery
click "apply" button (user manager asks for your password)
do NOT enter your password and wait 30 seconds
result: user manager applied your new user avatar even without your password

Comment 1 Patrick Silva 2020-01-18 17:32:47 UTC

User manager no longer asks for password to set an avatar to the logged-in user account.
User manager is still asking for password if the user account that you are modifying is not logged-in but it does not automatically set the avatar after 30 seconds as reported here.

Operating System: Arch Linux 
KDE Plasma Version: 5.17.90
KDE Frameworks Version: 5.66.0
Qt Version: 5.14.0