← Back to team overview

mahara-contributors team mailing list archive

[Bug 1766041] Re: Password policy setting for only upper and lowercase letters doesn't require uppercase

 

Environment tested: Master
Browser tested: Chrome

===================
Manual Test Script
===================


Log in as admin and Set Password Policy to 8 characters +Upper and lower-case letters
---1. New user try and set password = 8 characters all lower-case (passwordpassword) ---> should get error message NO UPPER-CASE USED ✔
---2. New user try and set password = 8 characters all upper-case (PASSWORDPASSWORD) ---> should get error message NO LOWER-CASE USED ✔
---3. New user try and set password = 8 characters all upper and lower case + number (PASSWORDPASSWORD!) → should get error message No numbers allowed  ✔
---4. New user try and set password = 8 characters all upper and lower case + symbol (PASSWORDPASSWORD1) → should get error message No symbol  allowed ✔
---5. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD) → successful

Log in as admin and Set Password Policy to 8 characters +Upper and lower-case letters and numbers
---1. New user try and set password = 8 characters all lower-case (passwordpassword) ---> should get error message NO UPPER-CASE USED ✔
---2. New user try and set password = 8 characters all upper-case (PASSWORDPASSWORD) ---> should get error message NO LOWER-CASE USED ✔
---3. New user try and set password = 8 characters all upper and lower case + number (PASSWORDPASSWORD!) → should get error message No numbers allowed  ✔
---4. New user try and set password = 8 characters all upper and lower case + symbol (PASSWORDPASSWORD1) → should get error message No lowercase✔
---5. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD) → should get error message No number entered ✔
---6. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD!) → should get error message No symbol  allowed ✔
---7. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD1) → success✔

Log in as admin and Set Password Policy to 8 characters + Upper and lower-case letters, numbers, symbols
---1. New user try and set password = 8 characters all lower-case (passwordpassword) ---> should get error message NO UPPER-CASE USED ✔
---2. New user try and set password = 8 characters all upper-case (PASSWORDPASSWORD) ---> should get error message NO LOWER-CASE USED ✔
---3. New user try and set password = 8 characters all upper and lower case + number (PASSWORDPASSWORD!) → should get error message No numbers allowed   ✔
---4. New user try and set password = 8 characters all upper and lower case + symbol (PASSWORDPASSWORD1) → should get error message No lowercase ✔
---5. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD) → should get error message No number entered and symbol entered  ✔
---6. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD!) → should get error message No number entered ✔
---7. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD1) → should get error message No symbol entered ✔
---8. New user try and set password = 8 characters all upper and lower case (passwordPASSWORD1!) → success ✔

Error message text
1. Password Policy to 8 characters +Upper and lower-case letters
---a. Your password must be at least 8 characters long. Passwords are case sensitive and must be different from your username. Your password must contain upper and lowercase letters.
2. Log in as admin and Set 
---b. Your password must be at least 8 characters long. Passwords are case sensitive and must be different from your username. Your password must contain upper and lowercase letters, numbers
3. Password Policy to 8 characters + Upper and lower-case letters, numbers, symbols
---c. Your password must be at least 8 characters long. Passwords are case sensitive and must be different from your username. Your password must contain upper and lowercase letters, numbers, symbols.


Catalyst QA Approved ✔

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1766041

Title:
  Password policy setting for only upper and lowercase letters doesn't
  require uppercase

Status in Mahara:
  In Progress
Status in Mahara 18.04 series:
  In Progress
Status in Mahara 18.10 series:
  In Progress

Bug description:
  Reported at https://mahara.org/interaction/forum/topic.php?id=8232

  When the password policy is set to just upper and lowercase characters
  and a minimum of 8 letters, the following password is accepted even
  though it doesn't contain an uppercase letter:

  maggie12

  It seems that uppercase letters are ignored in all scenarios for the
  password policy and a password is created when they are absent.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1766041/+subscriptions


References