[Bug] Password Complexity Requirements Ignored Using system.user.editUser()

I am using an Ignition 8.1.9 with an Internal User Source that has password complexity, length, age and history requirements set. These requirements are enforced when changing the user’s password using the scripting function system.user.editUser() within the Designer Script Console. However, these requirements seem to be ignored when changing a user’s password from a Perspective Session or from a script running in the Designer in Preview Mode.

This is pretty easy to test. Running the following code in the Designer Script Console:

userSource = "default"
user = system.user.getUser("default", "testuser")
user.set('password', 'test')
UIResponse = system.user.editUser(userSource, user)
print(UIResponse.getInfos())
print(UIResponse.getWarns())
print(UIResponse.getErrors())

Output:

[]
[]
[Password does not meet complexity requirement.]

Running the following code in the Designer in Preview Mode or within a Perspective Session:

userSource = "default"
user = system.user.getUser("default", "testuser")
user.set('password', 'test')
UIResponse = system.user.editUser(userSource, user)
system.perspective.print(UIResponse.getInfos())
system.perspective.print(UIResponse.getWarns())
system.perspective.print(UIResponse.getErrors())

Output:

[Changes to user "testuser" saved.]
[]
[]
1 Like

I’ll open an issue for this.