Password length check is ignored if user has ManagePortal permission