The change password url, which is where you get directed when you are forced to change your password, is currently set to user/edit.
This normally causes you to end up on the user/edit/account form as it is the default in drupal core.
However it is very easy for other modules to change the default tab to another profile tab if it is more relevant for the site.
For example, I have a user profile tab (using profile2) that has all the users details on it and I have made it so that that is the default tab for the user account edit page.
This means when a user is forced to update their password, they are taken to user/edit, whicih is now the profile tab and does not have a password field on it.
The easy solution for this is to have the change password url be user/edit/account, whcih will always be the drupal account form (unless some developer is making huge changes, in which case that doesn't really have to be supported).
Another potential solution is to have an additional field on the force change settings page where you can set the url for the password change page (and have it default to user/edit/account).
| Comment | File | Size | Author |
|---|---|---|---|
| #3 | password_policy-change_password_url-1479514-3.patch | 2.08 KB | rooby |
| #1 | password_policy-change_password_url-1479514-1.patch | 716 bytes | rooby |
Comments
Comment #1
rooby commentedHere is a patch for the easy solution.
Comment #3
rooby commentedAn attempt at fixing the failed tests.
Comment #4
erikwebb commentedLooks good to me. Inevitably I think this URL could be changed by other modules or move around the form. I don't think there's really a perfect answer here, but you're right that this URL is more specific.
http://drupalcode.org/project/password_policy.git/commit/85bc995