diff --git a/src/authentic2_auth_fc/views.py b/src/authentic2_auth_fc/views.py index 5cf65bb..a47285d 100644 --- a/src/authentic2_auth_fc/views.py +++ b/src/authentic2_auth_fc/views.py @@ -536,7 +536,7 @@ class UnlinkView(LoggerMixin, FormView): for event in self.request.session.get(constants.AUTHENTICATION_EVENTS_SESSION_KEY, []): if event['how'].startswith('password'): return False - return True + return self.request.user.can_change_password() def dispatch(self, request, *args, **kwargs): if not request.user.is_authenticated():