0002-Allow-to-specify-maximum-password-age.patch - Redmine

app/controllers/application_controller.rb (working copy)
204	204	def check_password_change
205	205	if session[:pwd]
206	206	if User.current.must_change_password?
	207	flash[:error] = l(:error_password_expired)
207	208	redirect_to my_password_path
208	209	else
209	210	session.delete(:pwd)

         return auth_source.allow_password_changes?
       end
       def password_expired?
         changed_on = self.passwd_changed_on || Time.at(0)
         period = Setting.password_max_age.to_i
         if period.zero?
           false
         else
           changed_on < period.days.ago
         end
       end
       def must_change_password?
         must_change_passwd? && change_password_allowed?
         (must_change_passwd? || password_expired?) && change_password_allowed?
       end
       def generate_password?

     <%= submit_tag l(:button_apply) %>
     <% end %>
     <% unless @user.must_change_passwd? %>
     <% unless @user.must_change_passwd? || @user.password_expired? %>
     <% content_for :sidebar do %>
     <%= render :partial => 'sidebar' %>
     <% end %>

     <p><%= setting_text_field :password_min_length, :size => 6 %></p>
     <p>
       <%= setting_select :password_max_age, [[l(:label_disabled), 0]] + [7, 30, 60, 90, 180, 365].collect{|days| [l('datetime.distance_in_words.x_days', :count => days), days.to_s]} %>
     </p>
     <p><%= setting_check_box :lost_password, :label => :label_password_lost %></p>
     <p><%= setting_text_field :max_additional_emails, :size => 6 %></p>

config/locales/de.yml (working copy)
1026	1026	setting_non_working_week_days: Arbeitsfreie Tage
1027	1027	setting_openid: Erlaube OpenID-Anmeldung und -Registrierung
1028	1028	setting_password_min_length: Mindestlänge des Kennworts
	1029	setting_password_max_age: Erzwinge Passwortwechsel nach
1029	1030	setting_per_page_options: Objekte pro Seite
1030	1031	setting_plain_text_mail: Nur reinen Text (kein HTML) senden
1031	1032	setting_protocol: Protokoll

       error_attachment_too_big: "This file cannot be uploaded because it exceeds the maximum allowed file size (%{max_size})"
       error_session_expired: "Your session has expired. Please login again."
       warning_attachments_not_saved: "%{count} file(s) could not be saved."
       error_password_expired: "Your password has expired or the administrator requires you to change it."
       mail_subject_lost_password: "Your %{value} password"
       mail_body_lost_password: 'To change your password, click on the following link:'
-...
       setting_file_max_size_displayed: Maximum size of text files displayed inline
       setting_repository_log_display_limit: Maximum number of revisions displayed on file log
       setting_openid: Allow OpenID login and registration
       setting_password_max_age: Require password change after
       setting_password_min_length: Minimum password length
       setting_new_project_user_role_id: Role given to a non-admin user who creates a project
       setting_default_projects_modules: Default enabled modules for new projects

     password_min_length:
       format: int
       default: 8
     # Maximum password age in days
     password_max_age:
       format: int
       default: 0
     # Maximum number of additional email addresses per user
     max_additional_emails:
       format: int

         assert_equal false, User.find_by_login('jsmith').must_change_passwd?
       end
       def test_user_with_expired_password_should_be_forced_to_change_its_password
         User.find_by_login('jsmith').update_attribute :passwd_changed_on, 14.days.ago
         with_settings :password_max_age => 7 do
           post '/login', :username => 'jsmith', :password => 'jsmith'
           assert_redirected_to '/my/page'
           follow_redirect!
           assert_redirected_to '/my/password'
           get '/issues'
           assert_redirected_to '/my/password'
         end
       end
       def test_user_with_expired_password_should_be_able_to_change_its_password
         User.find_by_login('jsmith').update_attribute :passwd_changed_on, 14.days.ago
         with_settings :password_max_age => 7 do
           post '/login', :username => 'jsmith', :password => 'jsmith'
           assert_redirected_to '/my/page'
           follow_redirect!
           assert_redirected_to '/my/password'
           follow_redirect!
           assert_response :success
           post '/my/password', :password => 'jsmith', :new_password => 'newpassword', :new_password_confirmation => 'newpassword'
           assert_redirected_to '/my/account'
           follow_redirect!
           assert_response :success
           assert_equal false, User.find_by_login('jsmith').must_change_passwd?
         end
       end
       def test_register_with_automatic_activation
         Setting.self_registration = '3'

Redmine