site.ini [PasswordChangeRequiredSettings] #

The block [PasswordChangeRequiredSettings] of settings/site.ini, with 1 setting(s).

Never edit settings/site.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/site.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/site.ini.append.php for one siteaccess,
• extension/<extension>/settings/site.ini.append.php in an extension (read when the extension is active).

ExemptViews #

"Change password at next sign-in": an administrator ticks it on a user account (the
account edit form, or ./console exp:user-password-change-required); after that user's
next sign-in every page sends them to user/password until they set a new password,
which clears it. The REST interface answers 403 password_change_required, WebDAV and
SOAP refuse the sign-in. Ignored for administrators in demo mode (EXP_DEMO_MODE=1).
Guide: doc/eng-us/features/6.0/password-change-at-next-sign-in.md

The views that stay open meanwhile: module/view, or a module alone for all its views.
user/password is always open. user2fa is the two-step sign-in (it comes first).

Default: a list of 3: user/password, user/logout, user2fa.

<?php /* #?ini charset="utf-8"?
# settings/override/site.ini.append.php
[PasswordChangeRequiredSettings]
# an empty "ExemptViews[]" first replaces the shipped list; without it the items are added
ExemptViews[]
ExemptViews[]=user/password
ExemptViews[]=user/logout
ExemptViews[]=user2fa
*/ ?>

Related #

• All blocks of site.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/site.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.