FriendsOfSymfony/FOSUserBundle — Issue #549: Rearrange forms (edit profile / change password)
Author: michaelsauter
Created: 2012-02-22 15:37:02+00:00
State: open

Currently a user needs to provide his password to change the profile. This has a couple of drawbacks:

1) Even changing non-sensitive data such as additional fields in User require the user to enter a password
2) It makes it difficult to integrate the bundle with e.g. FOSFacebookBundle, as facebook users do not have a password set

Now, I do understand that changing the username SHOULD require a password. So .... why not change the form setup in this way:
1) Have one form for non-sensitive data (let's call it profile form)
2) Have one form for sensitive data (let's call it change account details form)

I think it would be even better to remove the username from the account details and enable login (only?) via email (see my comment on issue #353). If one would do this, the setup would be as follows:

* Profile form: Username (+ additional fields created by the developer). No password required.
* Account details form: Email, password

I think this would improve usability for users while keeping the security we have right now.