privilege password ... change own password without that

[BirgitLachner]

I realized today that my server was hacked. I had a look at the output and found the a player came in and suddenly can change my password.

Now ... I searched for the possibility to change passwords of other players ... and suddenly I realized that it might be the privilege "password" that was automatically granted to every player that joins.
I always thought that the privilege "password" only gives the player to ability to change his own password!? Because before using this privilege, the user can't change a standard-password, that is defined in the minetest.conf.

So is there a possibilty to give a user the privilege to change his own password? What privileg does he need?

Thanks, Birgit

[GreenXenith]

You require no privilege to change your own password; that is a client thing.
By giving people the password priv you let them change other people's passwords.

[rubenwardy]

Correct, the password privilege is to change other user's passwords.

[BirgitLachner]

hmmm ... yes, I understand the problem. I gave the user that privilege, because my buddies said that they can not change it. I'll check that again ... damn!!