Enable password validation on all the views and API endpoints that change password.

mayan/apps/user_management/forms.py

@@ -2,6 +2,7 @@ from __future__ import unicode_literals
 
 from django import forms
 from django.contrib.auth import get_user_model
+from django.contrib.auth.password_validation import validate_password
 from django.core.exceptions import ValidationError
 from django.utils.translation import ugettext_lazy as _
 
@@ -20,10 +21,17 @@ class PasswordForm(forms.Form):
         label=_('Confirm password'), widget=forms.PasswordInput()
     )
 
+    def __init__(self, *args, **kwargs):
+        self.user = kwargs.pop('user', None)
+        return super(PasswordForm, self).__init__(*args, **kwargs)
+
     def clean(self):
         password_1 = self.cleaned_data['new_password_1']
         password_2 = self.cleaned_data['new_password_2']
         if password_1 != password_2:
             raise ValidationError('Passwords do not match.')
+        else:
+            if self.user:
+                validate_password(password_2, self.user)
 
         return self.cleaned_data