id,summary,reporter,owner,description,type,status,component,version,severity,resolution,keywords,cc,stage,has_patch,needs_docs,needs_tests,needs_better_patch,easy,ui_ux 27045,Document that AUTH_PASSWORD_VALIDATORS doesn't apply to create_user() and create_superuser(),Chris Griffin,Tim Graham,"According to this [https://groups.google.com/forum/#!searchin/django-users/AUTH_PASSWORD_VALIDATORS$20create_user%7Csort:relevance/django-users/3nL4cImH1Ls/JPVdlUX9CAAJ thread], the `create_user()` method does not enforce the password validators which I ran into while trying to unittest my validation settings. This seems quite dangerous especially since most validation in django is normally on the model level and many developers like myself may assume these methods would enforce these settings.",Cleanup/optimization,closed,Documentation,1.9,Normal,fixed,AUTH_PASSWORD_VALIDATORS,,Ready for checkin,1,0,0,0,0,0