I get a notice in the _password_policy_constraint_validate() function when $account->roles is not defined. Patch to follow.
Here is the patch.
Simple enough patch, but when would $account->roles not be defined?
Good question. It actually may never happen in a standard Drupal install, it might just be something with my site that was causing the problem.
Automatically closed -- issue fixed for 2 weeks with no activity.
Drupal is a registered trademark of Dries Buytaert.