Modifying password regular expression in Library Settings Editor can cause helper on the Update Password page to be invalid

Bug #1486151 reported by Michael Peters on 2015-08-18
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Evergreen
Low
Unassigned

Bug Description

Currently, Evergreen installs with a default regex for password strength, defined in Account.pm, which is that the password must be at least 7 characters in length, contain at least one letter, and contain at least one number, which will continue to be indicated on the update_password_msg.tt2 page by default. A user-friendly explanation of this is displayed on the Update Password page in the My Account section of the OPAC.

Unfortunately, it is currently possible to modify the global.password_regex and override the default regex via the Library Settings Editor, but the user might not be aware that they need to update the helper on the Update Password page.

This branch addresses this by providing the user with a hint in the description for the org unit setting "global.password_regex" to modify update_password_msg.tt2 with a user friendly description of the locally customized requirements.

If global.password_regex is not configured, the OPAC will still use the default regex defined in Account.pm, and the helper verbiage remains the same as always.

http://git.evergreen-ils.org/?p=working/Evergreen.git;a=shortlog;h=refs/heads/user/mrpeters/lp1013786_configure_pw_strength_reminders

Thanks for your consideration!

Changed in evergreen:
milestone: 2.9-beta → 2.next
Kathy Lussier (klussier) on 2015-12-09
Changed in evergreen:
assignee: Michael Peters (mrpeters) → nobody
status: New → Triaged
importance: Undecided → Low
Changed in evergreen:
assignee: nobody → Christine Burns (christine-burns)

I have tested this code and consent to signing off on it with my email address, <email address hidden> and name Christine Burns.

Changed in evergreen:
assignee: Christine Burns (christine-burns) → nobody
tags: added: signedoff
Kathy Lussier (klussier) wrote :

Thank you Mike and Christine! Merged to master.

I didn't add a release notes entry because I didn't think it was needed for a change in the description for a Library Setting. However, if the 2.10 RM thinks one is needed, just let me know and I'll write something up.

Changed in evergreen:
status: Triaged → Fix Committed
milestone: 2.next → 2.10-beta
Changed in evergreen:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers