Re: Forced password reset in django-admin

2011-07-02 Thread Wim Feijen
Hi Bejamin, Sounds like a cool feature: probably when you build such a thing, it will be used by dozens (or thousands). I noticed that I am making a lot of use of custom registration processes. Most of the time, I use django-registration as a solid basis, are you familiar with that? Best regards,

Re: Forced password reset in django-admin

2011-06-30 Thread benjaoming
Hello again! > What you have suggested here **is** an invasive change, because it > requires changes to existing code paths. I think the way to measure "invasive" is by means of backwards compatibility. We do not change required arguments, return value or model fields... The view normally respond

Re: Forced password reset in django-admin

2011-06-29 Thread Luke Plant
On 29/06/11 14:27, benjaoming wrote: > How so do you find it an invasive change? I think it could be solved > easily, even without being backwards incompatible. I didn't say it was invasive. I said that if it's *not* invasive then it can be implemented as a 3rd party library. If that was done, we

Re: Forced password reset in django-admin

2011-06-29 Thread TiNo
Hi, On Wed, Jun 29, 2011 at 18:01, Daniel Moisset wrote: > django.auth already provides a password reset mechanism, where users > can get a password reset link. > > So, woudn't this work for you?: > > 1) Create users with a large random password. Destroy every copy of the > password > 2) Use the

Re: Forced password reset in django-admin

2011-06-29 Thread Shawn Milochik
On 06/29/2011 12:01 PM, Daniel Moisset wrote: django.auth already provides a password reset mechanism, where users can get a password reset link. So, woudn't this work for you?: 1) Create users with a large random password. Destroy every copy of the password 2) Use the reset password feature wi

Re: Forced password reset in django-admin

2011-06-29 Thread Daniel Moisset
On Wed, Jun 29, 2011 at 8:36 AM, benjaoming wrote: > > Dear all, > > As a maintainer of many Django sites, I would often like to see a very > small feature implemented, that could make life a lot easier for me: > To force my users to set their own password. > > I know this could lead to a long deb

Re: Forced password reset in django-admin

2011-06-29 Thread benjaoming
> > As a maintainer of many Django sites, I would often like to see a very > > small feature implemented, that could make life a lot easier for me: > > To force my users to set their own password. > > First, to me, this is not obviously a 'very small feature'. > > Second, is there any reason it has

Re: Forced password reset in django-admin

2011-06-29 Thread Luke Plant
On 29/06/11 12:36, benjaoming wrote: > Dear all, > > As a maintainer of many Django sites, I would often like to see a very > small feature implemented, that could make life a lot easier for me: > To force my users to set their own password. First, to me, this is not obviously a 'very small featu

Forced password reset in django-admin

2011-06-29 Thread benjaoming
Dear all, As a maintainer of many Django sites, I would often like to see a very small feature implemented, that could make life a lot easier for me: To force my users to set their own password. I know this could lead to a long debate about password strength, SSL, password reminders, secret answe