No Code Attached Yet
avatar jakeinnh
25 Nov 2019

Steps to reproduce the issue

  1. Set the 'Require Password Reset' flag on a user using the Administrator interface
  2. Assume the role of that user, but who's forgotten their password
  3. Use the 'Forgotten Password' process flow
  4. Upon completing the password reset, when the user logs in, they are immediately asked to reset their password again.

Expected result

A 'Forgotten Password' reset should satisfy a pending 'Require Password Reset' and clear that flag if set.

Actual result

The user must reset their password twice.

System information (as much as possible)

Joomla! Version 3.9.13
Joomla! Platform Version 13.1.0 Stable
PHP 7.3.11
Apache 2.4.41
Server OS Ubuntu

Additional comments

Requiring the user to reset the password immediately after they've just completed that process is superfluous and a less than ideal UX which could lead to confusion and additional calls for support to system Administrators.

avatar jakeinnh jakeinnh - open - 25 Nov 2019
avatar joomla-cms-bot joomla-cms-bot - labeled - 25 Nov 2019
avatar joomla-cms-bot joomla-cms-bot - close - 6 Jan 2020
avatar SharkyKZ SharkyKZ - change - 6 Jan 2020
Status New Closed
Closed_Date 0000-00-00 00:00:00 2020-01-06 08:25:42
Closed_By SharkyKZ
avatar joomla-cms-bot joomla-cms-bot - change - 6 Jan 2020
Closed_By SharkyKZ joomla-cms-bot
avatar joomla-cms-bot
joomla-cms-bot - comment - 6 Jan 2020

Set to "closed" on behalf of @SharkyKZ by The JTracker Application at

avatar SharkyKZ
SharkyKZ - comment - 6 Jan 2020

Please test PR #27413.

This comment was created with the J!Tracker Application at

Add a Comment

Login with GitHub to post a comment