ITADN

Password Expiration UI Logic Bug

#9501Openneilt 创建于 2026-04-25
has-workaroundpri:housekeeping
N
neiltcommented
To recreate: 1. Create a new company company1 2. Setup company1 with user Jack, password abcdef 3. Set company1 Settings -> Defaults -> password duration to 400 days 4. Change Preferences -> Password to something else. This is required to get the new 400 days active. 5. Logout of Company1 6. Create a new company2 using `setup.pl` 7. Select Jack as a user for company2 using the existing user Jack 8. Logout of company2 9. Wait for more than 1 day 10. Try to login to company1 and fail because the the password expired The symptom: 1. To resolve set a new password for user jack using `setup.pl` 2. Login the company1 3. Go to Preferences -> Preferences and see the message that your password expires in 1 day 4. Go to Settings -> Defaults -> password duration and see that it is set for 400 days. 5. Wonder why if it is set for 400 days it just expired. Exposed UI logic bug. The problem: 1. The UI for Settings -> Defaults -> password duration is wrong when the users is setup from another company. I understand it is because there is only 1 user for both companies. Solutions: 1. Maybe there is a way to use the same user in setup.pl for a new company without resetting the password that needs to be documented. 2. When the 2nd company is created and the users is set back to 1 day password expiration maybe the 1st company needs to have the defaults reset. 3. Maybe when using an existing user for the 2nd company we should not reset the password details at all. I think 3 is the correct answer, but maybe there are details I don't understand.
0 条评论