Merge pull request #577 from nextcloud/backport/575/stable28

[stable28] fix(setting): Clarify the "Account disabled" option
nextcloud · Apr 17, 2024 · efeb768 · efeb768
2 parents 62c90a3 + d5435df
commit efeb768
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/js/password_policy-settings.js b/js/password_policy-settings.js
diff --git a/js/password_policy-settings.js.map b/js/password_policy-settings.js.map
diff --git a/src/AdminSettings.vue b/src/AdminSettings.vue
@@ -61,8 +61,11 @@
 					type="number"
 					@change="updateNumberSetting('maximumLoginAttempts')">
 				<label for="password-policy_failed-login">
-					{{ t('password_policy', 'Number of login attempts before the user account is blocked (0 for no limit)') }}
+					{{ t('password_policy', 'Number of login attempts before the user account will be disabled until manual action is taken. (0 for no limit)') }}
 				</label>
+				<p class="havibeenpwned-hint">
+					{{ t('password_policy', 'Please note, that this option is meant to protect attacked accounts. Disabled accounts have to be re-enabled manually by administration. Attackers that try to guess passwords of accounts will have their IP address blocked by the bruteforce protection independent from this setting.') }}
+				</p>
 			</li>
 		</ul>