Reset a student's password (course staff)
POST/api/courses/:id/roster/:userId/reset-password
Course-staff password reset for a student on the roster. This is a stop-gap for small deployments so course staff can help a student who is locked out, without a system administrator. Permission is tiered: the wrapper admits course FACULTY and TAs (and global admins); this handler additionally requires the target to be a STUDENT enrolled in THIS course. It refuses to reset a staff member, a global administrator, or anyone not on this roster, so it can never be used to seize a privileged account. System-wide resets stay on the admin User Accounts page. Not blocked on an archived course: a student may still need to sign in to review past work, and the reset touches the user account, not course content.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 500
Password reset.
Missing fields or weak password.
Not signed in.
Caller is not course staff, or the target is not a student on this roster.
Target user is not on this course roster.
Reset failed.