Uploaded image for project: 'OpenMRS Core'
  1. OpenMRS Core
  2. TRUNK-186

Change Password Improvements

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Should
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: OpenMRS 1.7.0
    • Component/s: None
    • Labels:
      None
    • Complexity:
      Undetermined

      Description

      There are a couple of issues we have found with the current "change password" process.

      • Force Password Change does not always work correctly. When an administrator changes a user's password and clicks the "Force Password Change" box, upon next login the user is presented with the "Change Login Info" section from the "My Profile" page. However, the main site header and footer are still presented as well and the links are available to click. Most of these links force the user to remain in the "change password" page, but not all. In particular, the Home Page, and any Module-added links to the Header do not seem to force this redirect, but also do not work correctly when accessed. This is causing much confusion for our users. To further complicate matters, if the user has recently been on the system, when they login it will try to take them back to the page they were most recently viewing. This complicates this process since not all pages are respecting the auto-redirect.
      • The user should not have to type in their old password in order to reset it. They are already authenticated. This is particularly true when they are forced to change at first login, since entering the "old password" was literally the last thing they did.

      Proposed Change for trunk, 1.5.x, and 1.4.x:

      Create a new "change password" page, which appears if "Force Password Change" is set to true. It should have no links, and should be forced to appear via ServletFilter or a similar mechanism until the user successfully passes through it. When the user submits, it should always take them to the Home Page. The password change page should ask the following:

      New Password: ++++++__
           Confirm New Password: ++++++__
        
                        Optional
                Secret Question: ++++++__
                  Secret Answer: ++++++__
          Confirm Secret Answer: ++++++__
      
                              Submit
      

        Gliffy Diagrams

          Attachments

          1. mylyn-context.zip
            0.6 kB
          2. openmrs-1686.2.patch
            50 kB
          3. openmrs-1686.patch
            34 kB
          4. openmrs-1686-3.patch
            32 kB
          5. openmrs-1686-4.patch
            26 kB
          6. openmrs-1686-5.patch
            30 kB
          7. openmrs-1686-6.patch
            30 kB
          8. openmrs-1686-7.patch
            32 kB
          9. openmrs-1686-7b.patch
            35 kB
          10. openmrs-1686-8.patch
            40 kB

            Activity

              People

              Assignee:
              zabilcm Zabil C.M [X] (Inactive)
              Reporter:
              mseaton Mike Seaton
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: