Steps to reproduce
- Log in to the User Portal as an administrator account whose password has not expired.
- Observe the page shown right after login.
Expected behavior
Administrator lands on the user list page. The password change page only appears automatically if the administrator's password has actually expired.
Actual behavior
Administrator is always redirected to the password change page after login, regardless of actual expiration status. This gives the impression that a password change is mandatory before accessing administrative functions.
Suggested fix or workaround
Gate the automatic redirect to the password change page on the actual expired / must_change status of the logged-in user, instead of showing it unconditionally for admin accounts.
This is a quick, targeted fix for the immediate confusion described in point 2 of the parent issue. The parent issue tracks the broader refactor (full password age/expiration UX across the password change page).
Steps to reproduce
Expected behavior
Administrator lands on the user list page. The password change page only appears automatically if the administrator's password has actually expired.
Actual behavior
Administrator is always redirected to the password change page after login, regardless of actual expiration status. This gives the impression that a password change is mandatory before accessing administrative functions.
Suggested fix or workaround
Gate the automatic redirect to the password change page on the actual
expired/must_changestatus of the logged-in user, instead of showing it unconditionally for admin accounts.This is a quick, targeted fix for the immediate confusion described in point 2 of the parent issue. The parent issue tracks the broader refactor (full password age/expiration UX across the password change page).