Password policy durations are not configurable

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.0.0 DXP FP78, 7.0.10.11 DXP SP11, 7.0.X, 7.1.10 DXP FP10, 7.1.10.2 SP2, 7.1.3 CE GA4, 7.1.X, Master
• Component/s: User Management > Password Policies
• Labels:
  • ee-ts
  • liferay-dxp-70-sp11
  • liferay-dxp-71-sp2
  • liferay-fixpack-de-78-7010
  • liferay-fixpack-dxp-10-7110
• Branch Version/s:
  7.1.x, 7.0.x
• Backported to Branch:
  Committed
• Story Points: 0.25
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/69170

The durations that can be used for Password Policy settings (maximum age, warning time, etc.) are hard coded. Additionally, after the portal is initialized, changes to the properties passwords.default.policy.* will not take effect forcing users to use the UI to make modifications.

Since these durations are not configurable users are forced to either modify the database or be confined to our predefined duration values.