Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-186

Change Password Improvements

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Should
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: OpenMRS 1.7.0
    • Component/s: None
    • Labels:
      None
    • Complexity:
      Undetermined

      Description

      There are a couple of issues we have found with the current "change password" process.

      • Force Password Change does not always work correctly. When an administrator changes a user's password and clicks the "Force Password Change" box, upon next login the user is presented with the "Change Login Info" section from the "My Profile" page. However, the main site header and footer are still presented as well and the links are available to click. Most of these links force the user to remain in the "change password" page, but not all. In particular, the Home Page, and any Module-added links to the Header do not seem to force this redirect, but also do not work correctly when accessed. This is causing much confusion for our users. To further complicate matters, if the user has recently been on the system, when they login it will try to take them back to the page they were most recently viewing. This complicates this process since not all pages are respecting the auto-redirect.
      • The user should not have to type in their old password in order to reset it. They are already authenticated. This is particularly true when they are forced to change at first login, since entering the "old password" was literally the last thing they did.

      Proposed Change for trunk, 1.5.x, and 1.4.x:

      Create a new "change password" page, which appears if "Force Password Change" is set to true. It should have no links, and should be forced to appear via ServletFilter or a similar mechanism until the user successfully passes through it. When the user submits, it should always take them to the Home Page. The password change page should ask the following:

      New Password: ++++++__
           Confirm New Password: ++++++__
        
                        Optional
                Secret Question: ++++++__
                  Secret Answer: ++++++__
          Confirm Secret Answer: ++++++__
      
                              Submit
      

        Attachments

        1. mylyn-context.zip
          0.6 kB
        2. openmrs-1686.2.patch
          50 kB
        3. openmrs-1686.patch
          34 kB
        4. openmrs-1686-3.patch
          32 kB
        5. openmrs-1686-4.patch
          26 kB
        6. openmrs-1686-5.patch
          30 kB
        7. openmrs-1686-6.patch
          30 kB
        8. openmrs-1686-7.patch
          32 kB
        9. openmrs-1686-7b.patch
          35 kB
        10. openmrs-1686-8.patch
          40 kB

          Activity

            People

            Assignee:
            zabilcm Zabil C.M [X] (Inactive)
            Reporter:
            mseaton Mike Seaton
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: