From 5295f8a41f5acde842c141ca6dd00e364a5b5b40 Mon Sep 17 00:00:00 2001
From: sauls8t <saul@documize.com>
Date: Thu, 25 Jan 2018 17:50:13 +0000
Subject: [PATCH] Resolve password changing bug for logged in user

---
 domain/user/endpoint.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/domain/user/endpoint.go b/domain/user/endpoint.go
index 622efe37..4900cc62 100644
--- a/domain/user/endpoint.go
+++ b/domain/user/endpoint.go
@@ -502,7 +502,7 @@ func (h *Handler) ChangePassword(w http.ResponseWriter, r *http.Request) {
 	newPassword := string(body)
 
 	// can only update your own account unless you are an admin
-	if !ctx.Administrator || (!ctx.Administrator && userID != ctx.UserID) {
+	if !ctx.Administrator && userID != ctx.UserID {
 		response.WriteForbiddenError(w)
 		return
 	}