Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-186

Change Password Improvements



    • Type: New Feature
    • Status: Closed
    • Priority: Should
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: OpenMRS 1.7.0
    • Component/s: None
    • Labels:
    • Complexity:


      There are a couple of issues we have found with the current "change password" process.

      • Force Password Change does not always work correctly. When an administrator changes a user's password and clicks the "Force Password Change" box, upon next login the user is presented with the "Change Login Info" section from the "My Profile" page. However, the main site header and footer are still presented as well and the links are available to click. Most of these links force the user to remain in the "change password" page, but not all. In particular, the Home Page, and any Module-added links to the Header do not seem to force this redirect, but also do not work correctly when accessed. This is causing much confusion for our users. To further complicate matters, if the user has recently been on the system, when they login it will try to take them back to the page they were most recently viewing. This complicates this process since not all pages are respecting the auto-redirect.
      • The user should not have to type in their old password in order to reset it. They are already authenticated. This is particularly true when they are forced to change at first login, since entering the "old password" was literally the last thing they did.

      Proposed Change for trunk, 1.5.x, and 1.4.x:

      Create a new "change password" page, which appears if "Force Password Change" is set to true. It should have no links, and should be forced to appear via ServletFilter or a similar mechanism until the user successfully passes through it. When the user submits, it should always take them to the Home Page. The password change page should ask the following:

      New Password: ++++++__
           Confirm New Password: ++++++__
                Secret Question: ++++++__
                  Secret Answer: ++++++__
          Confirm Secret Answer: ++++++__

        Gliffy Diagrams


          1. mylyn-context.zip
            0.6 kB
          2. openmrs-1686.2.patch
            50 kB
          3. openmrs-1686.patch
            34 kB
          4. openmrs-1686-3.patch
            32 kB
          5. openmrs-1686-4.patch
            26 kB
          6. openmrs-1686-5.patch
            30 kB
          7. openmrs-1686-6.patch
            30 kB
          8. openmrs-1686-7.patch
            32 kB
          9. openmrs-1686-7b.patch
            35 kB
          10. openmrs-1686-8.patch
            40 kB



              zabilcm Zabil C.M [X] (Inactive)
              mseaton Mike Seaton
              0 Vote for this issue
              4 Start watching this issue