Prevent admin from invalidating their own password

src/components/user/row.vue

@@ -46,8 +46,9 @@ except according to the terms contained in the LICENSE file.
               {{ $t('action.editProfile') }}
             </router-link>
           </li>
-          <li>
+          <li :class="{ disabled }">
             <a class="reset-password" href="#"
+              v-tooltip.aria-describedby="disabled ? $t('cannotResetPassword') : null"
               @click.prevent="$emit('reset-password', user)">
               {{ $t('action.resetPassword') }}&hellip;
             </a>
@@ -158,6 +159,9 @@ export default {
     "field": {
       "sitewideRole": "Sitewide Role"
     },
+    // An Administrator may reset the password for another Web User, but not for
+    // their own account.
+    "cannotResetPassword": "You may not reset your own password on this page. To change your password, edit your profile.",
     // An Administrator may retire other Web Users, but not their own account.
     "cannotRetire": "You may not retire yourself.",
     "action": {

test/components/user/reset-password.spec.js

@@ -13,12 +13,22 @@ describe('UserResetPassword', () => {
     mockLogin({ email: '[email protected]', displayName: 'Alice' });
   });
 
-  it('toggles the modal', () =>
-    load('/users', { root: false }).testModalToggles({
-      modal: UserResetPassword,
-      show: '.user-row .reset-password',
-      hide: '.btn-link'
-    }));
+  describe('reset password button', () => {
+    it('toggles the modal', () =>
+      load('/users', { root: false }).testModalToggles({
+        modal: UserResetPassword,
+        show: '.user-row .reset-password',
+        hide: '.btn-link'
+      }));
+
+    it('is disabled for the current user', async () => {
+      const component = await load('/users', { root: false });
+      const a = component.get('.user-row .reset-password');
+      a.element.parentNode.classList.contains('disabled').should.be.true();
+      a.should.have.ariaDescription(/^You may not reset your own password/);
+      await a.should.have.tooltip();
+    });
+  });
 
   it('sends the correct request', () =>
     mockHttp()

transifex/strings_en.json

@@ -3852,6 +3852,10 @@
           "developer_comment": "This is the text of a form field."
         }
       },
+      "cannotResetPassword": {
+        "string": "You may not reset your own password on this page. To change your password, edit your profile.",
+        "developer_comment": "An Administrator may reset the password for another Web User, but not for their own account."
+      },
       "cannotRetire": {
         "string": "You may not retire yourself.",
         "developer_comment": "An Administrator may retire other Web Users, but not their own account."