[
https://issues.apache.org/jira/browse/OFBIZ-5009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13603415#comment-13603415
]
Sumit Pandit commented on OFBIZ-5009:
-------------------------------------
Reference requirement for the feature:
http://markmail.org/message/sihxekwk6655t5gh#query:+page:1+mid:bcw2vva2hjxhsodq+state:results
> Enforce user to reset his password in a pre-defined regular interval of time.
> -----------------------------------------------------------------------------
>
> Key: OFBIZ-5009
> URL: https://issues.apache.org/jira/browse/OFBIZ-5009
> Project: OFBiz
> Issue Type: New Feature
> Components: framework
> Affects Versions: SVN trunk
> Reporter: Sumit Pandit
> Attachments: OFBIZ-5009.patch, Password-expiration-alert.GIF,
> Password-Expired-Alert.GIF
>
>
> For a user account in system, we can set password age for an additional
> security.
> Proposed system will start suggesting to user to reset his password few days
> before password expiration. Then Once password expired, system will enforce
> him to reset his password before processing further.
> Following will be control points and would be part of system configuration-
> * *Control Points -*
> ** Admin can enable/disable the reset password functionality.
> *** -It will control by a flag in propriety file where admin can
> enable/disable it by setting true/false.
> ** Number of days in which password will expired.
> *** - It will defined in propriety file so that admin can control it.
> ** Number of days before when password expiration alert display at user's
> screen.
> *** - It will defined in propriety file so that admin can control it.
> * *How should it processed -*
> ** After user logged-in, display password expiration notification message to
> user if his password will expire in comming days.
> ** After user logged-in, display change password screen, when password is
> expired. i.e. The difference in days since last time password updated is
> exceed to number of days specified in system policies. Enforce user to reset
> his password.
> * *What will be the out-put -*
> ** Please find the screenhot in attachment.
> ** Password is about to expire : Password-expiration-alert.gif : Observe
> alert message after login.
> ** Password is expired : Password-Expired-Alert : Observe the alert message
> with reset password screen.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
