NEW2.03.01 · Released 7 August 2015
NEWfinPOWER Connect
Released in
2.03.01
7 August 2015
- Opened23 Jul
- Closed29 Jul
- Released7 Aug
Article 13126
Job J015956
Passwords; Strong Password checks enhanced
What constitutes a 'Strong' password has been enhanced within finPOWER Connect.
The following, additional checks are made for 'Strong' passwords. If any of these fail, the password is not deemed to be 'Strong':
- Cannot be 'Password' or any number substituted version of this such as 'Pa55w0rd'.
- Cannot be a numberr substituted version of the User Id, e.g., if the User Id is 'John', it cannot be 'j0hn' (the 'o' substituted for a zero)
Within the business layer, the ISSecurity.IsPasswordStrong method has been obsoleted since it generated errors rather than returning a message about why the password was not strong. This is replaced by the ISSecurity.ValidatePassword method.