[PasswordChangeRequiredSettings]
Available since Exponential 6.0.15 (in development, not in a release yet).
Summary
The group [PasswordChangeRequiredSettings] of settings/site.ini.
File
settings/site.ini; override it in settings/override/site.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| ExemptViews[] | user/password; user/logout; user2fa | "Change password at next sign-in": an administrator ticks it on a user account (the account edit form, or ./console exp:user-password-change-required); after that user's next sign-in every page sends them to user/password until they set a new password, which clears it. The REST interface answers 403 password_change_required, WebDAV and SOAP refuse the sign-in. Ignored for administrators in demo mode (EXP_DEMO_MODE=1). Guide: doc/eng-us/features/6.0/password-change-at-next-sign-in.md The views that stay open meanwhile: module/view, or a module alone for all its views. user/password is always open. user2fa is the two-step sign-in (it comes first). |
See also
Generated example: site.ini [PasswordChangeRequiredSettings]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/site.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment