Issue creating users since 4.3 where custom user role is used.

[vegaskev]

I have a custom user role (see code below). For whatever reason, since updating to WordPress 4.3.1, I cannot create a new user and assign them this user role, nor can I edit any profile that is assigned to this custom user role. (same goes for any of my custom user roles).

I've tried default generated password, custom strong, custom medium, and even weak ones while checking the checkbox. Though, if I change the role to subscriber (or another native wp user role), it will work as intended.

function add_member_one(){
    $roles_set = get_option('member_1_set');
    if(!$roles_set){
        add_role('member_01', 'Member Level 1', array(
            'read' => true,
            'edit_posts' => false,
            'delete_posts' => false,
            'upload_files' => false 
        ));
        update_option('member_1_set',true);
    }
}
add_action('plugins_loaded','add_member_one');

Here is the error message (even on the natively generated wp password, without touching the password field at all...

ERROR: Please make the password a medium or strong one.

NOTE: If I create a user as a subscriber, then create a custom password and change the user role, everything seems to work fine. The only time it doesn't work correctly is when I try to assign a custom user role on user creation on the '/user-new.php' screen.

Also.... I hadn't created any users during the short 4.3 period, so this issue may have occurred during the 4.3 - 4.3.1 period, I'm not 100% sure.

[SergeyBiryukov]

Hi @vegaskev, welcome to Trac!

Here is the error message (even on the natively generated wp password, without touching the password field at all...

ERROR: Please make the password a medium or strong one.

The message comes from the ​Force Strong Passwords plugin, not from WordPress core. Per ​this thread, the issue appears to be resolved in version 1.6 of the plugin.

[vegaskev]

Wow....apparently, that's an mu plugin on wpengine installs. Sorry for not digging deep enough to figure that out myself. My apologies for wasting your time.

On the flip side, thank you.

[boogah]

The message comes from the ​Force Strong Passwords plugin, not from WordPress core. Per ​this thread, the issue appears to be resolved in version 1.6 of the plugin.

Force Strong Passwords developer and WP Engine employee here. This should be fixed in the most recent public version of Force Strong Passwords and in the version deployed to WP Engine.

If you're still running into issues, please reach out to WPE support or drop ​this into wp-content/mu-plugins/ to disable Force Strong Passwords altogether.