Piero is your password respecting your IS_STRONG min length?

Also, if the only thing you want to enforce with IS_STRONG is the minimum
length of the user password, you can enforce it with CRYPT :

requires = CRYPT(min_length=auth.settings.password_min_length,
              error_message=T('too short')

Or

requires = CRYPT(min_length=8,
              error_message=T('too short')


Richard

On Fri, Oct 12, 2012 at 1:21 PM, piero crisci <piero.cri...@gmail.com>wrote:

> Dear Richard i did what you said.
> But even with appadmin, if i change the user.info using db.auth_user when
> i submit the information i get the rise of the error_message set in the
> IS_STRONG control.
> If i remove the string in the db.py
> db.auth_user.password.requires= [*IS_STRONG(min=8),
> CRYPT(auth.settings.hmac_key)*]
> I can remove the pending in the registration key but i lose IS_STRONG
> control for the users password.
> For now i set this string:
> db.auth_user.password.requires = CRYPT(key=auth.settings.hmac_key,
> min_length=8, error_message = 'Lunghezza minima richiesta 8 caratteri')
>
> In this way i can have at least control the password length, but for being
> compliance with the policy requested i should use the IS_STRONG checks
> How can i solve this problem?
> Thanks againg
>
> Il giorno venerdì 12 ottobre 2012 19:00:13 UTC+2, Richard ha scritto:
>>
>> You can use the appadmin for these tasks :
>>
>> http://DOMAINOR127.0.0.1:80/**YOURAPPNAME/appadmin<http://DOMAINOR127.0.0.1:80/YOURAPPNAME/appadmin>
>>
>> Then you will have a list of all your tables that you can access by
>> clicking over their name. You should understand rapidly how it's working.
>>
>> Ask other questions here if you need more help about that.
>>
>> Richard
>>
>>
>> On Fri, Oct 12, 2012 at 11:04 AM, piero crisci <piero....@gmail.com>wrote:
>>
>>> I tryed to find others with the same iusse problem without understand
>>> how to solve the problems :(
>>>
>>> I set in the db.py the follow table
>>>
>>> ##############################**##########
>>> db.define_table('auth_user',
>>>     Field('username', type='string',
>>>           label=T('Username')),
>>>     Field('first_name', type='string',
>>>           label=T('First Name')),
>>>     Field('last_name', type='string',
>>>           label=T('Last Name')),
>>>     Field('email', type='string',
>>>           label=T('Email')),
>>>     Field('password', type='password',length=512,
>>>           readable=False,
>>>           label=T('Password')),
>>>     Field('created_on','datetime',**default=request.now,
>>>           label=T('Created On'),writable=False,readable=**False),
>>>     Field('modified_on','datetime'**,default=request.now,
>>>           label=T('Modified On'),writable=False,readable=**False,
>>>           update=request.now),
>>>     Field('registration_key',**default='',
>>>           writable=False,readable=False)**,
>>>     Field('reset_password_key',**default='',
>>>           writable=False,readable=False)**,
>>>     Field('registration_id',**default='',
>>>           writable=False,readable=False)**,
>>>     format='%(username)s',
>>>     migrate=settings.migrate)
>>>
>>>
>>> db.auth_user.first_name.**requires = IS_NOT_EMPTY(error_message=**
>>> auth.messages.is_empty)
>>> db.auth_user.last_name.**requires = IS_NOT_EMPTY(error_message=**
>>> auth.messages.is_empty)
>>> #db.auth_user.password.**requires = [ IS_STRONG(min=8,
>>> number=1,special=1,error_**message = "La password deve contenere almeno
>>> 8 Caratteri, un Numero, un Carattere Speciale, un carattere Maiuscolo"),
>>> CRYPT(key=auth.settings.hmac_**key)]
>>> db.auth_user.password.**requires= [*IS_STRONG(min=8),
>>> CRYPT(auth.settings.hmac_key)*]
>>>
>>> db.auth_user.username.requires = IS_NOT_IN_DB(db, db.auth_user.username,
>>> error_message = 'Username già censita')
>>> db.auth_user.email.requires = (IS_EMAIL(error_message=auth.**
>>> messages.invalid_email),
>>>                                IS_NOT_IN_DB(db, db.auth_user.email,error_
>>> **message = 'Email già censita'))
>>> auth.define_tables(migrate = settings.migrate)
>>>
>>> I set in the default.py this def for manage the user changes .
>>>
>>> @auth.requires_login()
>>> @auth.requires_membership('**risorse_umane' or 'admin')
>>> def anagrafica_utenti_db_manage():
>>>     form = SQLFORM.smartgrid(db.auth_**user,onupdate=auth.archive)
>>>     return locals()
>>>
>>> When i try to modify the name or the surname the framework rise the
>>> IS_STRONG control even if i don't touch the password string.
>>> I am new with web2py and i want just to know if i need to create a form
>>> to make the user changes or i can fix this problem using the smartgrid.
>>> I also set the "Requires approval" for the new registration. How can i
>>> delete the "Pending" in the registration key ? (I can t do it right now
>>> because of the IS_STRONG control.
>>> Thanks for help
>>> And sorry for bother you
>>>
>>> --
>>>
>>>
>>>
>>>
>>
>>  --
>
>
>
>

-- 



Reply via email to