Überprüfung der Passwortrichtlinie, wenn die Administratorin eine Benutzerin ändert

diff --git a/SL/Auth/PasswordPolicy.pm b/SL/Auth/PasswordPolicy.pm
index 866e49c1ea2840bf161d36e02f6619663b7803d9..dd7e8e9c14739701917e90e3a64680748049b0ed 100644 (file)
--- a/SL/Auth/PasswordPolicy.pm
+++ b/SL/Auth/PasswordPolicy.pm
@@ -19,10 +19,11 @@ use Rose::Object::MakeMethods::Generic
 );
 
 sub verify {
 );
 
 sub verify {

-  my ($self, $password) = @_;
+  my ($self, $password, $is_admin) = @_;

 
   my $cfg = $self->config;
   return OK() unless $cfg && %{ $cfg };
 
   my $cfg = $self->config;
   return OK() unless $cfg && %{ $cfg };

+  return OK() if $is_admin && $cfg->{disable_policy_for_admin};

 
   my $result = OK();
   $result |= TOO_SHORT()            if $cfg->{min_length}                && (length($password) < $cfg->{min_length});
 
   my $result = OK();
   $result |= TOO_SHORT()            if $cfg->{min_length}                && (length($password) < $cfg->{min_length});


@@ -144,12 +145,16 @@ The password contains an invalid character.
 
 =over 4
 
 
 =over 4
 

-=item C<verify $password>
+=item C<verify $password, $is_admin>

 
 Checks whether or not the password matches the policy. Returns C<OK()>
 if it does and an error code otherwise (binary or'ed of the error
 constants).
 
 
 Checks whether or not the password matches the policy. Returns C<OK()>
 if it does and an error code otherwise (binary or'ed of the error
 constants).
 

+If C<$is_admin> is trueish and the configuration specifies that the
+policy checks are disabled for the administrator then C<verify> will
+always return C<OK()>.
+

 =item C<errors $code>
 
 Returns an array of human-readable strings describing the issues set
 =item C<errors $code>
 
 Returns an array of human-readable strings describing the issues set

diff --git a/bin/mozilla/admin.pl b/bin/mozilla/admin.pl
index eac4d083ec61b4672091eca7254e2d3edfe6210d..eee799958f92a7173a98634dd926e4ffd91b35a6 100755 (executable)
--- a/bin/mozilla/admin.pl
+++ b/bin/mozilla/admin.pl
@@ -42,6 +42,7 @@ use POSIX qw(strftime);
 use Sys::Hostname;
 
 use SL::Auth;
 use Sys::Hostname;
 
 use SL::Auth;

+use SL::Auth::PasswordPolicy;

 use SL::Form;
 use SL::Iconv;
 use SL::Mailer;
 use SL::Form;
 use SL::Iconv;
 use SL::Mailer;


@@ -520,12 +521,6 @@ sub save_user {
 
   $myconfig->save_member();
 
 
   $myconfig->save_member();
 

-  if ($main::auth->can_change_password()
-      && defined $form->{new_password}
-      && ($form->{new_password} ne '********')) {
-    $main::auth->change_password($form->{login}, $form->{new_password});
-  }
-

   $form->{templates}       =~ s|.*/||;
   $form->{templates}       =  "$main::templates/$form->{templates}";
   $form->{mastertemplates} =~ s|.*/||;
   $form->{templates}       =~ s|.*/||;
   $form->{templates}       =  "$main::templates/$form->{templates}";
   $form->{mastertemplates} =~ s|.*/||;


@@ -578,8 +573,20 @@ sub save_user {
     }
   }
 
     }
   }
 

-  $form->redirect($locale->text('User saved!'));
+  if ($main::auth->can_change_password()
+      && defined $form->{new_password}
+      && ($form->{new_password} ne '********')) {
+    my $verifier = SL::Auth::PasswordPolicy->new;
+    my $result   = $verifier->verify($form->{new_password}, 1);
+
+    if ($result != SL::Auth::PasswordPolicy->OK()) {
+      $form->error($::locale->text('The settings were saved, but the password was not changed.') . ' ' . join(' ', $verifier->errors($result)));
+    }

 
 

+    $main::auth->change_password($form->{login}, $form->{new_password});
+  }
+
+  $form->redirect($locale->text('User saved!'));

 }
 
 sub save_user_as_new {
 }
 
 sub save_user_as_new {