Control force password reset at Add Users page too.

Co-authored-by: Claude <noreply@anthropic.com>

Author: Alex-Jordan

htdocs/js/AddUsers/add-users.js

@@ -13,4 +13,25 @@
 
 	passwordSelect.addEventListener('change', setPlaceholders);
 	setPlaceholders();
+
+	// Each "force password reset" checkbox starts out unchecked. Automatically check it once a password is typed
+	// into that row's password field, or once a fallback password source other than "None" is selected (since that
+	// fallback value will be used as the password for any row left blank). If the instructor manually toggles a
+	// checkbox, stop overriding that row's checkbox for the rest of the page's lifetime.
+	const manuallySet = new Set();
+	for (const autoCheckbox of document.querySelectorAll('input[data-auto-check="password"]')) {
+		const passwordField = autoCheckbox.closest('tr')?.querySelector('.new_password');
+		if (!passwordField) continue;
+
+		autoCheckbox.addEventListener('change', () => manuallySet.add(autoCheckbox));
+
+		const updateCheckbox = () => {
+			if (!manuallySet.has(autoCheckbox))
+				autoCheckbox.checked = passwordField.value !== '' || passwordSelect.value !== '';
+		};
+
+		passwordField.addEventListener('input', updateCheckbox);
+		passwordSelect.addEventListener('change', updateCheckbox);
+		updateCheckbox();
+	}
 })();

lib/WeBWorK/ContentGenerator/Instructor/AddUsers.pm

@@ -78,7 +78,7 @@ sub initialize ($c) {
 					my $newPassword = $db->newPassword;
 					$newPassword->user_id($new_user_id);
 					$newPassword->password(cryptPassword($password));
-					$newPassword->must_reset_password(1);
+					$newPassword->must_reset_password($c->param("must_reset_$i") ? 1 : 0);
 					$db->addPassword($newPassword);
 				}
 

lib/WeBWorK/ContentGenerator/Instructor/UserList.pm

@@ -133,11 +133,11 @@ use constant FIELD_PROPERTIES => {
 				: 0;
 		}
 	},
-	section    => { name => x('Section'),          type => 'text', attributes => { size => 3 } },
-	recitation => { name => x('Recitation'),       type => 'text', attributes => { size => 3 } },
-	comment    => { name => x('Comment'),          type => 'text', attributes => { size => 20 } },
-	permission => { name => x('Permission Level'), type => 'permission' },
-	password   => { name => x('Password'),         type => 'password' },
+	section    => { name => x('Section'),                       type => 'text', attributes => { size => 3 } },
+	recitation => { name => x('Recitation'),                    type => 'text', attributes => { size => 3 } },
+	comment    => { name => x('Comment'),                       type => 'text', attributes => { size => 20 } },
+	permission => { name => x('Permission Level'),              type => 'permission' },
+	password   => { name => x('Password (set/delete/enforce)'), type => 'password' },
 };
 
 async sub pre_header_initialize ($c) {

templates/ContentGenerator/Instructor/AddUsers.html.ep

@@ -91,6 +91,7 @@
 					<th id="comment_header"><%= maketext('Comment') %></th>
 					<th id="permission_header"><%= maketext('Permission Level') %></th>
 					<th id="password_header"><%= maketext('Password') %></th>
+					<th id="must_reset_header"><%= maketext('Force Password Reset') %></th>
 				</tr>
 			</thead>
 			<tbody class="table-group-divider">
@@ -154,6 +155,14 @@
 							<%= text_field "password_$_" => '', size => '16', 'aria-labelledby' => 'password_header',
 							class => 'form-control form-control-sm w-auto new_password' =%>
 						</td>
+						<td class="text-center">
+							% # Unchecked by default. js/AddUsers/add-users.js automatically checks this once a
+							% # password is typed into the password field above, or once a fallback password source
+							% # other than "None" is selected (unless the instructor manually toggles it themselves).
+							<%= check_box "must_reset_$_" => 1, class => 'form-check-input',
+								'aria-label' => maketext('Force this user to reset their password at first login'),
+								data         => { auto_check => 'password' } =%>
+						</td>
 					</tr>
 				% }
 			</tbody>