See 🐛 Prevent saving config entities when configuration overrides are applied Needs work , edit forms should always load config without overrides.
Create a password length constraint with a length of 8.
Add something like this to settings.php :
$config['password_policy.password_policy.foo']['policy_constraints'][0]['character_length'] = 42;
The constraint edit form now shows a length of 42.
This is wrong before edit forms should always show the config stored in database and not overrides.
(Or it risks adding the overrides to the database.)
Load the password policy with loadOverrideFree().
Needs review
4.0
Code
The change/bugfix cannot be fully demonstrated by automated testing, and thus requires manual testing in a variety of environments.
Thanks for the issue and patch. Tagging for testing.
Assigning to myself for testing since this looks pretty simple to test.