Fix user password set command

When identity 'user' commands were migrated to SDK in previous
commit[1] the command for user self-service password reset was
changed from using keystoneclient update_password function to the
openstacksdk update_user function. The SDK update_user function is
intended for administrators to update user attributes and is
restricted by policy.
This patch uses the update_password function in openstacksdk.

[1] https://review.opendev.org/c/openstack/python-openstackclient/+/909030

Assisted-By: Cursor Auto
Depends-On: https://review.opendev.org/c/openstack/openstacksdk/+/980429
Partial-Bug: #2144315
Change-Id: I0be5d219ba854ea64c9ee9640128d0426d067bf6
Signed-off-by: Dylan McCulloch <Dylan.McCulloch@gmail.com>

Author: dylanmcculloch

openstackclient/identity/v3/user.py

@@ -759,7 +759,7 @@ def take_action(self, parsed_args: argparse.Namespace) -> None:
                 )
             )
 
-        identity_client.update_user(
+        identity_client.update_password(
             user=user_id,
             current_password=current_password,
             password=password,

openstackclient/tests/unit/identity/v3/test_user.py

@@ -1716,7 +1716,7 @@ def test_user_password_change(self):
         conn = self.app.client_manager.sdk_connection
         user_id = conn.config.get_auth().get_user_id(conn.identity)
 
-        self.identity_sdk_client.update_user.assert_called_with(
+        self.identity_sdk_client.update_password.assert_called_with(
             user=user_id, current_password=current_pass, password=new_pass
         )
 
@@ -1733,7 +1733,7 @@ def test_user_create_password_prompt(self):
         conn = self.app.client_manager.sdk_connection
         user_id = conn.config.get_auth().get_user_id(conn.identity)
 
-        self.identity_sdk_client.update_user.assert_called_with(
+        self.identity_sdk_client.update_password.assert_called_with(
             user=user_id, current_password=current_pass, password=new_pass
         )
 
@@ -1758,7 +1758,7 @@ def test_user_password_change_no_prompt(self):
         conn = self.app.client_manager.sdk_connection
         user_id = conn.config.get_auth().get_user_id(conn.identity)
 
-        self.identity_sdk_client.update_user.assert_called_with(
+        self.identity_sdk_client.update_password.assert_called_with(
             user=user_id, current_password=current_pass, password=new_pass
         )
 

releasenotes/notes/fix-user-password-set-34175b7577b121e9.yaml

@@ -0,0 +1,7 @@
+---
+fixes:
+  - |
+    Fix ``openstack user password set`` command to support user
+    self-service password reset.
+    [Bug `2144315 <https://bugs.launchpad.net/bugs/2144315>`_]
+

requirements.txt

@@ -7,7 +7,7 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0
 cryptography>=2.7 # BSD/Apache-2.0
 cliff>=4.13.0 # Apache-2.0
 iso8601>=0.1.11 # MIT
-openstacksdk>=4.11.0 # Apache-2.0
+openstacksdk>=4.12.0 # Apache-2.0
 osc-lib>=2.3.0 # Apache-2.0
 oslo.i18n>=3.15.3 # Apache-2.0
 python-keystoneclient>=3.22.0 # Apache-2.0