Lưu ý Những thay đổi bổ sung định kỳ. Nếu bạn không tìm thấy chủ đề Envision được liệt kê trên màn hình của bạn, chọn bất kỳ chủ đề có sẵn cho các mục đích của bài tập chủ đề hiển thị thông tin sản phẩm trên màn hình kế tiếp, Bộ cài đặt ứng dụng màn hình Plugin | 84 CHAPTER 3 MANAGING PORTAL USERS Establishing Password Policies By this time you have created an organization and added several users to it. Each of these users will log on to our portal using the username and password supplied by the administrator. It is important that the user set her own password she shouldn t use the administrator-assigned password forever. In fact you saw earlier in the Password Settings section under Creating Users that the administrator can force the user to change her password during her first login. However we need better password policies than this to ensure the safety and security of our portal. Liferay provides a default password policy and also allows you to create your own policies for securing your portal. To edit the existing password policy or to create a new policy select the Password Policies tab in the Enterprise Admin application. You will find the Default Password Policy in the list of available policies. By default this is the only policy available to you so you will now create a policy of your own. To do so click the Add Password Policy button to open the screen shown in Figure 3-18. Figure 3-18. Creating a new password policy CHAPTER 3 MANAGING PORTAL USERS 85 Enter a name and description of your choice for this new policy. If you want a forced change on the password enable the Changeable check box. Also mark the Change Required check box and select the Minimum Age to one of the values displayed in the drop-down list. Your users will now be forced to wait until the indicated time period elapses before they are allowed to change their password. In addition to a forced change in password you can set several features on your password policy Syntax Checking Enabled If this option is enabled the entered password would be checked for its length and or compared against certain words. History Enabled If this is enabled the portal maintains a history of passwords and prevents the user from repeating previous passwords. Expiration
