We have users that forget their password, request a new one, then when they use the one-time login token, never actually reset their password once they're temporarily logged in. They need to be forced to change their password before they can browse the site.

CommentFileSizeAuthor
#8 password_policy-reset_force_change-1051390-8.patch2.5 KBerikwebb

Comments

deekayen’s picture

deekayen commented
Assigned: Unassigned » Bastlynn
George Bills’s picture

George Bills commented

+1 / subscribe.

jrz’s picture

jrz commented

subscribed

jrz’s picture

jrz commented

Back Again. I found a solution without touching the Password Policy Module.

function mymodule_form_user_pass_alter(&$form, &$form_state) {
$form['#submit'][] = 'mymodule_pass_submit';
}
function mymodule_pass_submit($form, &$form_state) {

$account = $form_state['values']['account'];

if(module_exists('password_policy')) {

db_query('UPDATE {password_policy_force_change} SET force_change = 1 WHERE uid = %d', $account->uid);

}
}

erikwebb’s picture

erikwebb commented
Status: Active » Closed (duplicate)

Part of a greater issue - #574180: 1st change of password should ignore time limits

deekayen’s picture

deekayen commented
Assigned: Bastlynn » Unassigned
Status: Closed (duplicate) » Active

The other was closed as un-solvable. If that's really the case, then let's patch core in a way that would allow this feature to happen. I think the request itself still has reasonable merit.

erikwebb’s picture

erikwebb commented
Version: 6.x-1.x-dev » 7.x-1.x-dev

Let's get this fixed for the more active 7.x branch and then we can patch backwards if the need exists.

erikwebb’s picture

erikwebb commented
Status: Active » Needs review
StatusFileSize
new password_policy-reset_force_change-1051390-8.patch2.5 KB

Since this changes core's behavior, I've added it as an option to the admin page to enable this behavior.

This somewhat depends on #1596960: Force password change on first-time login requires password to change

roball’s picture

roball commented

Has anybody tried that patch?

Looking for the same functionality in 6.x-1.x.

deekayen’s picture

deekayen commented
Version: 7.x-1.x-dev » 7.x-2.x-dev
Issue summary: View changes
Status: Needs review » Patch (to be ported)

  • deekayen committed bcfba4f on 8.x-1.x authored by erikwebb 
    Issue #1051390 by erikwebb | deekayen: Added Make option for password...