You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Sumit Pandit (JIRA)" <ji...@apache.org> on 2013/03/15 15:36:13 UTC
[jira] [Commented] (OFBIZ-5009) Enforce user to reset his password
in a pre-defined regular interval of time.
[ https://issues.apache.org/jira/browse/OFBIZ-5009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13603415#comment-13603415 ]
Sumit Pandit commented on OFBIZ-5009:
-------------------------------------
Reference requirement for the feature:
http://markmail.org/message/sihxekwk6655t5gh#query:+page:1+mid:bcw2vva2hjxhsodq+state:results
> Enforce user to reset his password in a pre-defined regular interval of time.
> -----------------------------------------------------------------------------
>
> Key: OFBIZ-5009
> URL: https://issues.apache.org/jira/browse/OFBIZ-5009
> Project: OFBiz
> Issue Type: New Feature
> Components: framework
> Affects Versions: SVN trunk
> Reporter: Sumit Pandit
> Attachments: OFBIZ-5009.patch, Password-expiration-alert.GIF, Password-Expired-Alert.GIF
>
>
> For a user account in system, we can set password age for an additional security.
> Proposed system will start suggesting to user to reset his password few days before password expiration. Then Once password expired, system will enforce him to reset his password before processing further.
> Following will be control points and would be part of system configuration-
> * *Control Points -*
> ** Admin can enable/disable the reset password functionality.
> *** -It will control by a flag in propriety file where admin can enable/disable it by setting true/false.
> ** Number of days in which password will expired.
> *** - It will defined in propriety file so that admin can control it.
> ** Number of days before when password expiration alert display at user's screen.
> *** - It will defined in propriety file so that admin can control it.
> * *How should it processed -*
> ** After user logged-in, display password expiration notification message to user if his password will expire in comming days.
> ** After user logged-in, display change password screen, when password is expired. i.e. The difference in days since last time password updated is exceed to number of days specified in system policies. Enforce user to reset his password.
> * *What will be the out-put -*
> ** Please find the screenhot in attachment.
> ** Password is about to expire : Password-expiration-alert.gif : Observe alert message after login.
> ** Password is expired : Password-Expired-Alert : Observe the alert message with reset password screen.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira