- TooSimilarPassword: do not round maxSimilarity up, because we

  sometimes use 0.999 to avoid the same password set.
  0.999 would be displayed as 100% (100% vs. 100%)

CHANGES.txt

@@ -5,7 +5,9 @@ CHANGES
 0.11.1 (unreleased)
 -------------------
 
-- Nothing changed yet.
+- ``TooSimilarPassword``: do not round ``maxSimilarity`` up, because we
+  sometimes use 0.999 to avoid the same password set.
+  0.999 would be displayed as 100% (100% vs. 100%)
 
 
 0.11.0 (2012-08-09)

src/z3c/password/README.txt

@@ -102,6 +102,14 @@ letters, digits, punctuation, other), and the maximum similarity score.
   ...
   TooSimilarPassword: Password is too similar to old one (similarity 88%, should be at most 60%).
 
+  >>> pwd2 = password.HighSecurityPasswordUtility()
+  >>> pwd2.maxSimilarity = 0.999
+
+  >>> pwd2.verify('fooBar12', 'fooBar12')
+  Traceback (most recent call last):
+  ...
+  TooSimilarPassword: Password is too similar to old one (similarity 100%, should be at most 99%).
+
 - The final check ensures that the password does not have too many characters
   of one group. The groups are: lower letters, upper letters, digits,
   punctuation, and others.

src/z3c/password/interfaces.py

@@ -75,7 +75,7 @@ def __init__(self, similarity=None, maxSimilarity=None):
                 'Password is too similar to old one'
                 ' (similarity ${similarity}%, should be at most ${maxSimilarity}%).',
                 mapping=dict(similarity=int(round(similarity * 100)),
-                             maxSimilarity=int(round(maxSimilarity * 100))))
+                             maxSimilarity=int(maxSimilarity * 100)))
 
 class TooManyGroupCharacters(InvalidPassword):
     __doc__ = _('''Password contains too many characters of one group.''')