As a User, I want to be emailed when I change my password, in case it happened when my account was compromised

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.2.X, Master
• Fix Version/s: 7.1.X, 7.2.10 DXP FP7, 7.2.X, 7.3.3 CE GA4, Master
• Component/s: User Management > Personal Data
• Labels:
  • ee-ts
  • liferay-fixpack-dxp-7-7210
  • pt-app-security-review
• Branch Version/s:
  7.2.x, 7.1.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/topolik/liferay-portal/pull/841

1. Start Liferay DXP with the following property

   admin.email.from.name=Test Test
   admin.email.from.address=[e-mail]
   announcements.email.to.name=noreply DXP
   announcements.email.to.address=[e-mail]
   mail.send.blacklist=\
        [e-mail],\
        [e-mail]

1. Login as an admin user
2. Go to Control Panel > Users and Organizations
3. Create a new user (user1)
4. Login as user1
5. Change password at user1's first login
6. Check that the "Your Password Has Been Changed" email is sent

EXPECTED RESULTS:
The "Your Password Has Been Changed" email will be sent.

NOTE
According to Control Panel > Configuration > Instance Settings > Email > Password Changed Notification, an email should be sent when the password is changed.