alchemy-devise 8.4.0 → 8.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9d09ae141f2a8fffa21c51258fa5d20d1b8b6d6b2dc93b5ace87d1be54e77652
-  data.tar.gz: d4671dc0ea62d25ddc2744025636e41fb3d447dc5a00a80c1106ab7298cd7a4e
+  metadata.gz: 6435b830a21aa21f4699a8417210a8005824974fb53ec4499a8bda06b80f4332
+  data.tar.gz: a9ef36882072e636046507157e41b07636a292030282e3c992997203f227a53c
 SHA512:
-  metadata.gz: 3f2410f1c117abdfe91e7dc7b2b45ddf3a4a2428e08c78ed17cab964ecd60910a33dd1cd49f1805d58e701345549593a2f4dfdd75cc0823fba3c60e9c605df02
-  data.tar.gz: 6ad17f1c4cc4b7775185c6417e5d7cd7dc53ce768dc0dc0fe29f9d12db4b928a15c8bf93b394e940f0237ba818595d4f2534c41fabd8b2989e42068f691b9779
+  metadata.gz: b87c4614c0048f138e2305cf3b0ddd9c196386bbf25f9e4aea1927c24d5de8a14fe626a03e657d33bea518f929e8bb1dad6a10878042a15aba5629d1e9a4055b
+  data.tar.gz: 21a224e9ad51dbfad4d6a15191586b5d4e3ebef0eef11a82f4422e9d97659703d3bf48eb2139a0642c461aa5520940b78e09cc6816a503d0991d698b06940493

data/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 8.4.2 (2026-10-22)
+
+<!-- Release notes generated using configuration in .github/release.yml at 8.4-stable -->
+
+## What's Changed
+### New Features
+* [8.4-stable] Merge pull request #312 from AlchemyCMS/stepup-auth-role-assignment by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy-devise/pull/313
+### Other Changes
+* [8.4-stable] Merge pull request #316 from AlchemyCMS/fix-ransack-6-user-search by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy-devise/pull/317
+* [8.4-stable] Merge pull request #320 from AlchemyCMS/fix-csp-test by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy-devise/pull/321
+
+
+**Full Changelog**: https://github.com/AlchemyCMS/alchemy-devise/compare/v8.4.1...v8.4.2
+
+## 8.4.1 (2026-09-23)
+
+<!-- Release notes generated using configuration in .github/release.yml at 8.4-stable -->
+
+## What's Changed
+### Other Changes
+* [8.4-stable] Merge pull request #306 from AlchemyCMS/fix-login-css-relative-color by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy-devise/pull/307
+* [8.4-stable] Merge pull request #309 from AlchemyCMS/fix/apply-csp-to-devise-controllers by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy-devise/pull/310
+
+
+**Full Changelog**: https://github.com/AlchemyCMS/alchemy-devise/compare/v8.4.0...v8.4.1
+
 ## 8.4.0 (2026-09-01)
 
 <!-- Release notes generated using configuration in .github/release.yml at 8.4-stable -->

data/README.md

@@ -62,6 +62,27 @@ If your app uses an old encryption that needs the +devise-encryptable+ gem you a
 Alchemy::Devise.config.devise_modules << :encryptable
 ```
 
+## Role changes
+
+Granting or revoking the `admin` role asks the admin performing the change to
+confirm their own password, both when creating a user and when editing one.
+Since `admin` is the only role that can manage users, every other role and
+every other user attribute can be edited with a valid session alone.
+
+Roles that need a password are configurable:
+
+```ruby
+# config/initializers/alchemy.rb
+Alchemy::Devise.config.privileged_user_roles << "editor"
+```
+
+Set this to `false` to grant roles with a valid session alone:
+
+```ruby
+# config/initializers/alchemy.rb
+Alchemy::Devise.config.require_password_for_role_change = false
+```
+
 ## Testing
 
 If you want to contribute (and you should ^_^), you need to run the tests locally on your machine.

data/app/assets/builds/alchemy-devise.css

@@ -1 +1 @@
-body.signup,body.user_sessions,body.passwords{background-image:url("https://picsum.photos/1920/1200.webp?grayscale");background-size:cover;background-position:center}body.signup #errors,body.signup .message.info,body.user_sessions #errors,body.user_sessions .message.info,body.passwords #errors,body.passwords .message.info{border-color:rgba(0,0,0,0)}body.signup #errors,body.user_sessions #errors,body.passwords #errors{margin-left:157px}body.signup #main_content,body.user_sessions #main_content,body.passwords #main_content{padding-top:var(--spacing-2);display:flex;flex-direction:column;justify-content:center}body.signup::after,body.user_sessions::after,body.passwords::after{content:"Image from Unsplash";position:absolute;bottom:var(--spacing-2);right:var(--spacing-2);font-size:var(--font-size_small);color:var(--body-background-color)}.logo-box{display:flex;flex-direction:column;align-items:center;justify-content:center;gap:var(--spacing-4);background-color:hsl(from var(--body-background-color) h s l/50%);backdrop-filter:blur(5px);border-radius:var(--border-radius_large);box-shadow:var(--dialog-box-shadow);padding:var(--spacing-4);margin-bottom:var(--spacing-6);text-shadow:0 0 2px var(--body-background-color)}.logo-box svg{width:200px;height:auto}.login_signup_box{position:relative;max-width:450px;margin:auto;--form-right-column-width: 1.65fr}.no-js .login_signup_box{display:none}.login_signup_box alchemy-message{margin-bottom:1.5em}.login_signup_box .panel{--panel-background-color: var(--body-background-color);width:100%;max-width:100%;margin:0;box-shadow:var(--dialog-box-shadow);border-radius:var(--border-radius_large);border-color:rgba(0,0,0,0)}@media(max-width: 500px){.login_signup_box .input,.login_signup_box .submit{grid-template-columns:1fr}.login_signup_box .input label,.login_signup_box .submit label{text-align:start;margin-bottom:var(--spacing-1)}}.login_signup_box .submit>a{display:inline-flex;align-items:center;gap:var(--spacing-0);width:fit-content}.login_signup_box .submit>a:hover alchemy-icon{transform:translateX(-2px);transition:transform var(--transition-duration)}@media(min-width: 501px){.login_signup_box .submit{grid-template-columns:var(--form-left-column-width) minmax(254px, var(--form-right-column-width))}.login_signup_box .submit>label{text-align:start}.login_signup_box .submit>label input[type=checkbox]{margin:0 var(--spacing-0) 0 0}.login_signup_box .submit>a{grid-column:2;grid-row:1}}
+body.signup,body.user_sessions,body.passwords{background-image:url("https://picsum.photos/1920/1200.webp?grayscale");background-size:cover;background-position:center}body.signup #errors,body.signup .message.info,body.user_sessions #errors,body.user_sessions .message.info,body.passwords #errors,body.passwords .message.info{border-color:rgba(0,0,0,0)}body.signup #errors,body.user_sessions #errors,body.passwords #errors{margin-left:157px}body.signup #main_content,body.user_sessions #main_content,body.passwords #main_content{padding-top:var(--spacing-2);display:flex;flex-direction:column;justify-content:center}body.signup::after,body.user_sessions::after,body.passwords::after{content:"Image from Unsplash";position:absolute;bottom:var(--spacing-2);right:var(--spacing-2);font-size:var(--font-size_small);color:var(--body-background-color)}.logo-box{display:flex;flex-direction:column;align-items:center;justify-content:center;gap:var(--spacing-4);background-color:color-mix(in srgb, var(--body-background-color) 50%, transparent);backdrop-filter:blur(5px);border-radius:var(--border-radius_large);box-shadow:var(--dialog-box-shadow);padding:var(--spacing-4);margin-bottom:var(--spacing-6);text-shadow:0 0 2px var(--body-background-color)}.logo-box svg{width:200px;height:auto}.login_signup_box{position:relative;max-width:450px;margin:auto;--form-right-column-width: 1.65fr}.no-js .login_signup_box{display:none}.login_signup_box alchemy-message{margin-bottom:1.5em}.login_signup_box .panel{--panel-background-color: var(--body-background-color);width:100%;max-width:100%;margin:0;box-shadow:var(--dialog-box-shadow);border-radius:var(--border-radius_large);border-color:rgba(0,0,0,0)}@media(max-width: 500px){.login_signup_box .input,.login_signup_box .submit{grid-template-columns:1fr}.login_signup_box .input label,.login_signup_box .submit label{text-align:start;margin-bottom:var(--spacing-1)}}.login_signup_box .submit>a{display:inline-flex;align-items:center;gap:var(--spacing-0);width:fit-content}.login_signup_box .submit>a:hover alchemy-icon{transform:translateX(-2px);transition:transform var(--transition-duration)}@media(min-width: 501px){.login_signup_box .submit{grid-template-columns:var(--form-left-column-width) minmax(254px, var(--form-right-column-width))}.login_signup_box .submit>label{text-align:start}.login_signup_box .submit>label input[type=checkbox]{margin:0 var(--spacing-0) 0 0}.login_signup_box .submit>a{grid-column:2;grid-row:1}}

data/app/assets/stylesheets/alchemy-devise/login.scss

@@ -37,7 +37,7 @@ body.passwords {
   align-items: center;
   justify-content: center;
   gap: var(--spacing-4);
-  background-color: hsl(from var(--body-background-color) h s l / 50%);
+  background-color: color-mix(in srgb, var(--body-background-color) 50%, transparent);
   backdrop-filter: blur(5px);
   border-radius: var(--border-radius_large);
   box-shadow: var(--dialog-box-shadow);

data/app/controllers/alchemy/admin/passwords_controller.rb

@@ -6,6 +6,7 @@ module Alchemy
   module Admin
     class PasswordsController < ::Devise::PasswordsController
       include Alchemy::Admin::Locale
+      include Alchemy::Admin::CspProtection
 
       helper "Alchemy::Admin::Base"
 

data/app/controllers/alchemy/admin/user_sessions_controller.rb

@@ -6,6 +6,7 @@ module Alchemy
   module Admin
     class UserSessionsController < ::Devise::SessionsController
       include Alchemy::Admin::Locale
+      include Alchemy::Admin::CspProtection
 
       protect_from_forgery prepend: true
 

data/app/controllers/alchemy/admin/users_controller.rb

@@ -9,7 +9,10 @@ module Alchemy
       authorize_resource class: Alchemy::User,
         only: [:index, :new, :signup, :create]
 
-      helper_method :while_signup?, :can_update_role?
+      before_action :confirm_password_for_role_change, only: [:create, :update]
+
+      helper_method :while_signup?, :can_update_role?, :password_confirmation_required?,
+        :carried_over_user_params, :confirmed_alchemy_roles
 
       def index
         @query = User.ransack(params[:q])
@@ -66,6 +69,69 @@ module Alchemy
 
       private
 
+      def confirm_password_for_role_change
+        return unless role_change_requested?
+
+        # Keeps the password field around if the save fails validation later on
+        @password_confirmation_required = true
+        # Captured before the submitted attributes are assigned, so that a
+        # revoked role is still known
+        @confirmed_alchemy_roles =
+          privileged_roles(requested_alchemy_roles) | privileged_roles(persisted_alchemy_roles)
+        current_password = params[:user][:current_password].to_s
+        return if current_alchemy_user.valid_password?(current_password)
+
+        @user ||= User.new
+        @user.assign_attributes(user_params)
+        @user.errors.add(:current_password, current_password.blank? ? :blank : :invalid)
+        if user_password_required?
+          render action: (@user.new_record? ? :new : :edit), status: :unprocessable_content
+        else
+          render :confirm_password, status: :unprocessable_content
+        end
+      end
+
+      def role_change_requested?
+        return false unless Alchemy::Devise.config.require_password_for_role_change
+        return false if while_signup? || !can_update_role?
+        # An absent key leaves the roles untouched, it does not revoke them
+        return false unless params[:user].key?(:alchemy_roles)
+
+        privileged_roles(requested_alchemy_roles) != privileged_roles(persisted_alchemy_roles)
+      end
+
+      def privileged_roles(roles)
+        roles & Alchemy::Devise.config.privileged_user_roles.to_a
+      end
+
+      def requested_alchemy_roles
+        User.new(alchemy_roles: params.dig(:user, :alchemy_roles)).alchemy_roles.sort
+      end
+
+      def persisted_alchemy_roles
+        (@user || User.new).alchemy_roles.sort
+      end
+
+      def password_confirmation_required?
+        !!@password_confirmation_required
+      end
+
+      # The confirmation form replaces the real one, so the submitted attributes
+      # ride along in hidden fields. Passwords are deliberately left out: a
+      # hidden field would expose them to the very script execution this
+      # confirmation defends against.
+      def carried_over_user_params
+        user_params.except(:password, :password_confirmation)
+      end
+
+      def confirmed_alchemy_roles
+        @confirmed_alchemy_roles.map { User.human_alchemy_rolename(_1) }.to_sentence
+      end
+
+      def user_password_required?
+        @user.new_record? || params.dig(:user, :password).present?
+      end
+
       def set_roles
         if can_update_role?
           @user_roles = User::ROLES.map do |role|

data/app/views/alchemy/admin/users/_confirm_password_notice.html.erb

@@ -0,0 +1,5 @@
+<% action = f.object.new_record? ? "create" : "update" %>
+<alchemy-message type="info">
+  <%= Alchemy.t("admin.users.confirm_password_for_role_change.#{action}",
+        roles: confirmed_alchemy_roles, user: f.object.alchemy_display_name) %>
+</alchemy-message>

data/app/views/alchemy/admin/users/_fields.html.erb

@@ -36,6 +36,13 @@
       object: f.object %>
   </div>
 <% end %>
+<% if password_confirmation_required? %>
+  <%= render "confirm_password_notice", f: f %>
+  <%= f.input :current_password,
+    as: :password,
+    required: true,
+    input_html: {autocomplete: "current-password"} %>
+<% end %>
 <div class="submit">
   <label class="checkbox">
     <%= f.check_box :send_credentials %>

data/app/views/alchemy/admin/users/_resource_table.html.erb

@@ -8,7 +8,7 @@
         alchemy.edit_admin_user_path(user), {
           title: Alchemy.t(:edit_user),
           overflow: true,
-          size: "460x530"
+          size: "460x190"
         },
         title: Alchemy.t(:edit_user) %>
     <% else %>
@@ -28,5 +28,5 @@
     <%= user.human_alchemy_roles %>
   <% end %>
   <% table.delete_button tooltip: Alchemy.t(:delete_user), confirm_message: Alchemy.t(:confirm_to_delete_user) %>
-  <% table.edit_button tooltip: Alchemy.t(:edit_user), dialog_size: "460x530" %>
+  <% table.edit_button tooltip: Alchemy.t(:edit_user), dialog_size: "460x190" %>
 <% end %>

data/app/views/alchemy/admin/users/confirm_password.html.erb

@@ -0,0 +1,22 @@
+<%= alchemy_form_for [:admin, @user] do |f| %>
+  <% carried_over_user_params.each do |name, value| %>
+    <% if value.is_a?(Array) %>
+      <% value.each do |item| %>
+        <%= hidden_field_tag "user[#{name}][]", item, id: nil %>
+      <% end %>
+    <% else %>
+      <%= hidden_field_tag "user[#{name}]", value, id: nil %>
+    <% end %>
+  <% end %>
+  <%= render "confirm_password_notice", f: f %>
+  <%= f.input :current_password,
+    as: :password,
+    required: true,
+    autofocus: true,
+    input_html: {autocomplete: "current-password"} %>
+  <div class="submit">
+    <button type="submit">
+      <%= Alchemy.t(:save) %>
+    </button>
+  </div>
+<% end %>

data/app/views/alchemy/admin/users/index.html.erb

@@ -13,7 +13,7 @@
       tooltip_placement: "top-start",
       dialog_options: {
         title: Alchemy.t(:create_user),
-        size: "460x530"
+        size: "460x190"
       },
       if_permitted_to: [:create, Alchemy::User]
     ) %>

data/config/locales/de.yml

@@ -1,7 +1,21 @@
 de:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Ihr Passwort"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "wird zum Ändern der Rollen benötigt"
+              invalid: "ist nicht korrekt"
   alchemy:
     admin:
       login:
         remember_me: "Für %{days} Tage angemeldet bleiben"
       users:
+        confirm_password_for_role_change:
+          create: Um einen Benutzer mit der Rolle %{roles} anzulegen, ist Ihr eigenes Passwort erforderlich.
+          update: Um die Rolle %{roles} von %{user} zu ändern, ist Ihr eigenes Passwort erforderlich.
         preferred_timezone: Wählen Sie eine bevorzugte Zeitzone, wenn sie sich von %{server_timezone} unterscheidet

data/config/locales/en.yml

@@ -1,7 +1,21 @@
 en:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Your password"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "is required to change roles"
+              invalid: "is not correct"
   alchemy:
     admin:
       login:
         remember_me: "Remember me for %{days} days"
       users:
+        confirm_password_for_role_change:
+          create: In order to create a user with the %{roles} role you have to confirm with your own password.
+          update: In order to change the %{roles} role of %{user} you have to confirm with your own password.
         preferred_timezone: Pick the users preferred timezone if it is different from %{server_timezone}

data/config/locales/es.yml

@@ -0,0 +1,18 @@
+es:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Tu contraseña"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "es necesaria para cambiar los roles"
+              invalid: "no es correcta"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Para crear un usuario con el rol %{roles} debes confirmar con tu propia contraseña."
+          update: "Para cambiar el rol %{roles} de %{user} debes confirmar con tu propia contraseña."

data/config/locales/fr.yml

@@ -0,0 +1,18 @@
+fr:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Votre mot de passe"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "est requis pour modifier les rôles"
+              invalid: "n'est pas correct"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Pour créer un utilisateur avec le rôle %{roles}, vous devez confirmer avec votre propre mot de passe."
+          update: "Pour modifier le rôle %{roles} de %{user}, vous devez confirmer avec votre propre mot de passe."

data/config/locales/it.yml

@@ -0,0 +1,18 @@
+it:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "La tua password"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "è necessaria per modificare i ruoli"
+              invalid: "non è corretta"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Per creare un utente con il ruolo %{roles} devi confermare con la tua password."
+          update: "Per modificare il ruolo %{roles} di %{user} devi confermare con la tua password."

data/config/locales/nb.yml

@@ -0,0 +1,18 @@
+nb:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Passordet ditt"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "kreves for å endre roller"
+              invalid: "er ikke riktig"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "For å opprette en bruker med rollen %{roles} må du bekrefte med ditt eget passord."
+          update: "For å endre rollen %{roles} til %{user} må du bekrefte med ditt eget passord."

data/config/locales/nl.yml

@@ -0,0 +1,18 @@
+nl:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Je wachtwoord"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "is vereist om rollen te wijzigen"
+              invalid: "is niet juist"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Om een gebruiker met de rol %{roles} aan te maken moet je met je eigen wachtwoord bevestigen."
+          update: "Om de rol %{roles} van %{user} te wijzigen moet je met je eigen wachtwoord bevestigen."

data/config/locales/pl.yml

@@ -0,0 +1,18 @@
+pl:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Twoje hasło"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "jest wymagane do zmiany ról"
+              invalid: "jest nieprawidłowe"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Aby utworzyć użytkownika z rolą %{roles}, musisz potwierdzić własnym hasłem."
+          update: "Aby zmienić rolę %{roles} użytkownika %{user}, musisz potwierdzić własnym hasłem."

data/config/locales/ru.yml

@@ -0,0 +1,18 @@
+ru:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "Ваш пароль"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "необходим для изменения ролей"
+              invalid: "неверен"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "Чтобы создать пользователя с ролью %{roles}, подтвердите действие своим паролем."
+          update: "Чтобы изменить роль %{roles} у пользователя %{user}, подтвердите действие своим паролем."

data/config/locales/zh-CN.yml

@@ -0,0 +1,18 @@
+zh-CN:
+  activerecord:
+    attributes:
+      alchemy/user:
+        current_password: "您的密码"
+    errors:
+      models:
+        alchemy/user:
+          attributes:
+            current_password:
+              blank: "是更改角色所必需的"
+              invalid: "不正确"
+  alchemy:
+    admin:
+      users:
+        confirm_password_for_role_change:
+          create: "要创建具有 %{roles} 角色的用户，您必须使用自己的密码进行确认。"
+          update: "要更改 %{user} 的 %{roles} 角色，您必须使用自己的密码进行确认。"

data/lib/alchemy/devise/configuration.rb

@@ -41,6 +41,32 @@ module Alchemy
         :recoverable,
         :rememberable
       ]
+
+      # Require the acting user to confirm their own password before Alchemy
+      # roles are granted or changed
+      #
+      # Creating a user with roles and changing the roles of an existing user
+      # both ask for the password of the user performing the change. Every
+      # other user attribute can be edited with a valid session alone.
+      #
+      # === Example
+      #
+      #     # config/initializers/alchemy.rb
+      #     Alchemy::Devise.config.require_password_for_role_change = false
+      #
+      option :require_password_for_role_change, :boolean, default: true
+
+      # Alchemy roles that may only be granted or revoked with a password
+      #
+      # Only +admin+ can manage users, so granting any other role does not
+      # cross a trust boundary and never asks for a password.
+      #
+      # === Example
+      #
+      #     # config/initializers/alchemy.rb
+      #     Alchemy::Devise.config.privileged_user_roles << "editor"
+      #
+      option :privileged_user_roles, :collection, item_type: :string, default: %w[admin]
     end
   end
 end

data/lib/alchemy/devise/version.rb

@@ -1,5 +1,5 @@
 module Alchemy
   module Devise
-    VERSION = "8.4.0"
+    VERSION = "8.4.2"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: alchemy-devise
 version: !ruby/object:Gem::Version
-  version: 8.4.0
+  version: 8.4.2
 platform: ruby
 authors:
 - Thomas von Deyen
@@ -199,8 +199,10 @@ files:
 - app/views/alchemy/admin/passwords/new.html.erb
 - app/views/alchemy/admin/user_sessions/_logo.html.erb
 - app/views/alchemy/admin/user_sessions/new.html.erb
+- app/views/alchemy/admin/users/_confirm_password_notice.html.erb
 - app/views/alchemy/admin/users/_fields.html.erb
 - app/views/alchemy/admin/users/_resource_table.html.erb
+- app/views/alchemy/admin/users/confirm_password.html.erb
 - app/views/alchemy/admin/users/edit.html.erb
 - app/views/alchemy/admin/users/index.html.erb
 - app/views/alchemy/admin/users/new.html.erb
@@ -230,6 +232,14 @@ files:
 - config/locales/devise.ru.yml
 - config/locales/devise.zh-CN.yml
 - config/locales/en.yml
+- config/locales/es.yml
+- config/locales/fr.yml
+- config/locales/it.yml
+- config/locales/nb.yml
+- config/locales/nl.yml
+- config/locales/pl.yml
+- config/locales/ru.yml
+- config/locales/zh-CN.yml
 - config/routes.rb
 - config/spring.rb
 - db/migrate/20131015124700_create_alchemy_users.rb
@@ -266,7 +276,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Devise based user authentication for AlchemyCMS.
 test_files: []