owncloud / core

		$password = isset($_POST['personal-password']) ? $_POST['personal-password'] : null;

		$oldPassword = isset($_POST['oldpassword']) ? $_POST['oldpassword'] : '';

		if (!\OC_User::checkPassword($username, $oldPassword)) {

			$l = \OC::$server->getL10NFactory()->get('settings');

			\OC_JSON::error(["data" => ["message" => $l->t("Wrong password")]]);

			exit();

		}

		if ($oldPassword === $password) {

			$l = \OC::$server->getL10NFactory()->get('settings');

			\OC_JSON::error(["data" => ["message" => $l->t("The new password can not be the same as the previous one")]]);

			\OC_JSON::error(["data" => ["message" => $l->t("Wrong password")]]);

			exit();

		}

		if ($oldPassword === $password) {

			$l = \OC::$server->getL10NFactory()->get('settings');

			\OC_JSON::error(["data" => ["message" => $l->t("The new password can not be the same as the previous one")]]);

			exit();

	        }

		try {

			if (!is_null($password) && \OC_User::setPassword($username, $password)) {

				\OC::$server->getUserSession()->updateSessionTokenPassword($password);

	$isGroupAccessible = \OC::$server->getGroupManager()->getSubAdmin()->isSubAdminofGroup($currentUserObject, $targetGroupObject);

}

if(!OC_User::isAdminUser(OC_User::getUser())

	&& (!$isUserAccessible

		|| !$isGroupAccessible)) {

	$l = \OC::$server->getL10N('core');

	OC_JSON::error(['data' => ['message' => $l->t('Authentication error')]]);

	exit();

}

if (is_null($targetUserObject)) {

	OC_JSON::error(['data' => ['message' => $l->t('Unknown user')]]);