mahara-contributors team mailing list archive
-
mahara-contributors team
-
Mailing list archive
-
Message #47442
[Bug 1756726] A change has been merged
Reviewed: https://reviews.mahara.org/8684
Committed: https://git.mahara.org/mahara/mahara/commit/bc109ad5bc20b822268e34aa703f74b567856174
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch: 18.04_STABLE
commit bc109ad5bc20b822268e34aa703f74b567856174
Author: Robert Lyon <robertl@xxxxxxxxxxxxxxx>
Date: Mon Mar 19 13:22:29 2018 +1300
Bug 1756726: Apply password policy on upgrade
Force all users on internal auth to reset their password on login
after upgrade
behatnotneeded
Change-Id: Ia988a0a7b939969bf0638eb410d17e1c88282c31
Signed-off-by: Robert Lyon <robertl@xxxxxxxxxxxxxxx>
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1756726
Title:
Password policy should be applied upon upgrade
Status in Mahara:
Fix Committed
Status in Mahara 18.04 series:
Fix Committed
Status in Mahara 18.10 series:
Fix Committed
Bug description:
In bug #845263 we implemented the password policy. When you upgrade,
and you go to Admin -> Configure site -> Site options -> Security
settings, it shows you the password policy, but existing accounts are
not required to use it unless they change their password.
Only when you change the length of the password or the make-up are
existing accounts required to reset their password.
It would be cleaner if upon upgrade all user accounts are required to
adhere to the password policy as listed in the security settings.
This should be a change similar to the one in /admin/site/options.php
lines 901-911
Additionally, everyone - including the current site admin, but
excluding the root user - are required to adhere.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1756726/+subscriptions
References