https://bugzilla.wikimedia.org/show_bug.cgi?id=44788
--- Comment #3 from Matthew Flaschen <[email protected]> --- Yeah, I think MZM's suggestion is simpler (less code to hook in everywhere). Either: 1. Make them change it immediately after login before doing anything. 2. Block login entirely if it's a bad password, which would effectively require the password change before the group change (which the community/bureaucrat would need to clearly communicate). If they didn't handle this ahead of time, it would require a reset. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. You are watching all bug changes. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
