check password in portal preferecne reset

product/ERP5/tests/testAuthenticationPolicy.py

@@ -747,6 +747,7 @@ class TestAuthenticationPolicy(ERP5TypeTestCase):
 
   def test_PreferenceTool_changePassword_checks_policy(self):
     person = self.createUser(self.id(), password='current')
+    person.newContent(portal_type = 'Assignment').open()
     login = person.objectValues(portal_type='ERP5 Login')[0]
     preference = self.portal.portal_catalog.getResultValue(
         portal_type = 'System Preference',
@@ -755,11 +756,10 @@ class TestAuthenticationPolicy(ERP5TypeTestCase):
     self._clearCache()
     self.tic()
 
-    self.login(person.getUserId())
-
     # too short password is refused
     ret = self.publish(
       '%s/portal_preferences' % self.portal.getPath(),
+      basic='%s:current' % self.id(),
       stdin=StringIO(urllib.urlencode({
         'Base_callDialogMethod:method': '',
         'dialog_id': 'PreferenceTool_viewChangePasswordDialog',
@@ -775,9 +775,19 @@ class TestAuthenticationPolicy(ERP5TypeTestCase):
       '<span class="error">Too short. </span>',
       ret.getBody())
 
+    # if for some reason, PreferenceTool_setNewPassword is called directly,
+    # the password policy is also checked, so this cause an unhandled exception.
+    self.login(person.getId())
+    self.assertRaises(
+      ValueError,
+      self.portal.PreferenceTool_setNewPassword,
+      current_password='current',
+      new_password='short')
+
     # long enough password is accepted
     ret = self.publish(
       '%s/portal_preferences' % self.portal.getPath(),
+      basic='%s:current' % self.id(),
       stdin=StringIO(urllib.urlencode({
         'Base_callDialogMethod:method': '',
         'dialog_id': 'PreferenceTool_viewChangePasswordDialog',