This meeting takes place every Friday at 14:00 UTC (currently 6:00am PT, 9:00am ET). See Time.is to see what that is in your timezone.

The meetings are held using Zoom, and a link is posted in the #ux Slack channel 10 minutes before the meeting. Agenda is first come, first serve and set by attendees. Use the Needs usability review issue tag for issues that need review and/or suggest issues in comments here.

List of Slack users to ping 10 minutes before the meeting:
@Gábor Hojtsy (he/him), @worldlinemine, @lauriii, @AaronMcHale, @anmolgoyal74, @Antoniya, @Ravi, @shaal, @ckrina, @simohell, @gauravvv, @penyaskito, @Mike Gifford (CivicActions), @April, @Quynh/Quinn, @yoroy

Go to the issue for the next meeting to add/remove yourself to/from the list.

Recording of this week's meeting: https://youtu.be/KlRnwzXPfgg

Rough transcript of this week's meeting: Drupal Usability Meeting - 2023-05-05.txt

We discussed the following issues:

NR and RTBC issues marked Needs usability review.

Comments

AaronMcHale created an issue. See original summary.

aaronmchale’s picture

The group is actively tracking progress on:

Issues brought forward from the previous meeting:

benjifisher’s picture

I would like to discuss the changes to password hashing in Drupal 10.1.0. I fear that some site owners will find themselves locked out of their sites.

From Slack (private channel):

I am ... worried about ... a site administrator who

  • uninstalls phpass for whatever reason
  • uninstalls it from a config import
  • neglects to execute database updates

Or maybe

  • Some update function throws an exception and phpass is never enabled.

References:

  1. Password Compatibility module (new core module)
  2. Password hashing was changed (change record)
  3. #3352094: Notify users that they need to reset their password when it matches an unsupported hash type
yoroy’s picture

Issue summary: View changes
benjifisher’s picture

Follow-up to #3: here is another scenario.

As a site admin, I check the available updates. I see that 10.1.0 has been released and I decide to upgrade the next day. I log out and get a good night's sleep.

The next day, I update the code and log in so that I can run updates ... except that my password is rejected.

Possible solutions:

  1. Get a one-time login link from Drush or the UI.
  2. Set $settings['update_free_access'] in settings.php.
  3. Downgrade to 10.0.9.

Are there other options? How do we communicate them?

aaronmchale’s picture

benjifisher’s picture

Issue summary: View changes
Status: Active » Fixed
Related issues: +#3358524: Users cannot log in if Password Compatibility module is not enabled
StatusFileSize
new51.28 KB

I am adding a link to the recording and a rough transcript. I am also adding a link to #3358524: Users cannot log in if Password Compatibility module is not enabled, which I created after the meeting. I am adding credits to this issue.

We previously linked to the other issues we discussed, and AaronMcHale commented on those issues.

This issue is done.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

aaronmchale’s picture

Added participants list to comment on #2969406: Fix incorrect message after resetting password.