Password reset is overwritten when "Use LDAP Password Policy" is enabled

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X, Master
• Fix Version/s: 7.0.0 DXP FP88, 7.0.X, 7.1.X, Master
• Component/s: Application Security > LDAP
• Labels:
  • ee-ts
  • liferay-fixpack-de-88-7010
  • pt-app-security-review
• Branch Version/s:
  7.0.x
• Backported to Branch:
  Committed
• Story Points: 5
• Fix Priority: 3

Steps to Reproduce

1. Set up LDAP enabling Use LDAP Password Policy and have a user imported into Liferay (without logging in as that user)
2. As the Administrator edit the imported user
3. See that the user's Require Password Reset is disabled and checked. This should not be checked since the LDAP user does not require a password reset and in the database the user's passwordReset is 0. Also it should be enabled so that it can be modified.

Note: On 7.0.x this issue is more prominent since changing a user's role will cause the passwordReset field to be updated.