> For the complete documentation index, see [llms.txt](https://help.santesuite.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-23.md).

# TEST: SECURITY-UM-23

## References

* [User Management](broken://pages/-LyJM_KRwADCTfXEdvxM)
* [TEST: SECURITY-UM-01](/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-01.md)
* [TEST: SECURITY-UM-21](/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-21.md)

## Discussion

The number of invalid login attempts per user is stored as a user's security property. This number can be edited only by resetting it to zero.

## Pre-Conditions / Setup

1. User must be logged into an account with policies granted for creating users.
2. Follow the instructions from [TEST: SECURITY-UM-01](/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-01.md) to create a new user -- applying any valid values for required fields.
3. User being tested must attempt to login with an incorrect password at least once.
4. Follow the instructions from [TEST: SECURITY-UM-21](/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-21.md) to navigate to **Administration Panel / Security / Users / Edit User** for the newly created user.

## Actions/Steps

1\. Click the pencil in the top right-hand corner of **Security Properties** to edit them.

![](/files/-Me1aZlQncui-kMX9o3D)

2\. Click the **Reset** button beside the **Invalid Logins** property.

![](/files/-Me1b0sVIRryfBn62FJ8)

3\. Click the **OK** button when the confirmation prompt appears in the browser.

![](/files/-Me1bduIPnG6w662yfKp)

5\. Click the green checkmark to save the edited **Invalid Logins**.

![](/files/-Me1WhhOu0AA-hqKmeMs)

## Expected Behaviour

* After the **OK** button in step 3 is clicked, the changes do not get saved until after step 5 and will be undone if step 5 is not taken.
* The number of **Invalid Logins** is reset after step 3 and displays "0".
* After step 5, the number of invalid logins is saved.