[Enhancement/Feature Request]: Set password in Add User page

[joyce-x-chen]

Use case/Problem Statement

Currently, when you create a new user account you complete the following steps

1. Fill in new practitioner details in the Add User page
   • Click Save
2. Set password in a separate User Credentials | [Username] page
   • Click Set password

The two steps are not linked, so you can create a new user without setting a password. This should not be allowed.

There is sometimes a lag between saving the new user and displaying the User Credentials page, which increases the risk that a new user account is created without setting a password.

Acceptance criteria

Allow the FHIR Web user to set the password of the new user within the Add User page - i.e. add 'Set password' and Confirm password' fields to the Add User page.

• After filling in the practitioner details and password in the updated Add User form, upon pressing "Save", the user account is generated with the appropriate credentials.

Project Contact

No response

Relevant Information

No response

[joyce-x-chen]

Does this have any implication for the user creation bulk import tool? There is already a password column in the csv template, but it is not mandatory.

It seems like good practice to not allow a user account to be created without a password. @dubdabasoduba @peterMuriuki should I create a corresponding issue in the fhir-tooling repo to request that password column is mandatory?

[peterMuriuki]

It seems like good practice to not allow a user account to be created without a password

I agree I do not have or see a usecase for creating a user without a password.

should I create a corresponding issue in the fhir-tooling repo to request that password column is mandatory?

Yes, I think this resolution is reasonable.