Task #2858
closed
Check Minimum number of days when changing password via password filter using superAdmin
0%
Description
In some development situations when using super admin as password filter user #2679 's requirement 3 is not fulfilled:
"if the password change comes from the password filter it always equals to the #1 case - the condition is mandatory"
I have Minimum number of days set to 1 in my password policy. The IdmPassword doesn't have set "Password change is required" attribute.
I can change password via ctrl+alt+delete anytimes I want. IdM let's me. The only place where this seems to be checked is when I am chagnign my own password from IdM GUI.
Tested also by @apeterova
Files
Related issues
Updated by Vladimír Kotýnek over 3 years ago
- Related to Task #2679: Change minimum number of days for password validity check added
Updated by Vladimír Kotýnek over 3 years ago
- Priority changed from Immediate to Low
After consultation - this is an issue only for development when I don't want to create separate users for testing and use someone with Application Administration rights.
Updated by Vladimír Kotýnek over 3 years ago
- Tracker changed from Defect to Task
- Subject changed from Minimum number of days not checked when changing password via password filter to Check Minimum number of days when changing password via password filter using superAdmin
- Description updated (diff)
- Affected versions deleted (
11.0.0)
Updated by Alena Peterová over 3 years ago
- File image_permissions.png image_permissions.png added
Updated by Alena Peterová over 3 years ago
For the record: password filter should be configured to run under a user who has following permissions, then the check of minimum number of days works fine:
Password filter - password change
Password filter - password validation
Updated by Vladimír Kotýnek over 3 years ago
- Status changed from New to Rejected
I added a warning to https://wiki.czechidm.com/devel/documentation/uniform_password/password_filter_dll#password_filter_deployment tutorial for my future self or someone else who will test password filter.
After consultation with @husniko I am closing the ticket.
Updated by Radek Tomiška over 3 years ago
- Assignee changed from Ondrej Husník to Vladimír Kotýnek