User: Forced password change after login when applying password policy changes

1 Initial Problem

Currenly ILIAS administrators are able to define a password policy for the local ILIAS user accounts. Users are forced to change their initial password after the first login. Nevertheless users are not yet forced to change their local password if an administrator applied changes to the password policy, e.g. by increasing the minimum character length.

2 Conceptual Summary

Therefore we suggest to add a confirmation dialogue when an administrator changes password policy settings in the ILIAS user administrator. ILIAS should check if any of the relevant settings has been modified. In this case a confirmation dialogue should be displayed with two possible actions:

1. Force Password Change: If clicked, all local ILIAS user accounts should be forced to change their password after their next successful login. The 'General Settings' page is shown afterwards with a respective MessageBox.
2. Continue without Change: If clicked, the 'General Settings' page is shown with a respective MessageBox.

3 User Interface Modifications

3.1 List of Affected Views

• Screen ID: usrf/settings/general_settings

3.2 User Interface Details

We are open for discussions about other button labels/texts.

3.3 New User Interface Concepts

None

4 Technical Information

None

5 Contact

• Author of the Request: Jansen, Michael [mjansen]
• Maintainer: Jansen, Michael [mjansen]
• Implementation of the feature is done by: Jansen, Michael [mjansen]

6 Funding

If you are interest in funding this feature, please add your name and institution to this list.

• …

7 Discussion

Kunkel, Matthias [mkunkel], 06 NOV 2018 : The confirmation screen ("Force …" or "Continue …") has to be a modal IMHO, esp. because we stay at the settings screen after saving the settings.

Jansen, Michael [mjansen], 06 NOV 2018: The settings form is a common \ilPropertyFormGUI. It is currently not possible to bind a modal dialogue to the form submission event. AFAIK it is even not possible to do this with the new UI framework forms. But a good idea anyway.

JourFixe, ILIAS [jourfixe], 12 NOV 2018 : We highly appreciate this suggestion and schedule it for 6.0. Implementation of the confirmation dialogue is currently not possible as a modal.

8 Implementation

Implemented as described above.

Test Cases

Test cases completed at 2019-04-29 by Jansen, Michael [mjansen]

• C25162: Ändern der Passwortrichtlinie

Approval

Approved at 11.05.2019 by René Sens (Bundesverwaltungsamt).