Allow users to be deactivated #308
Labels
category: authentication
A service responsible for logging users in and maintaining their permissions based on credentials
category: back end
Back end part of our web service
category: data
Anything related to data management and structure
new feature
Adding a new solution
Milestone
While discussing the deletion of users based on the design for the Admin UI (#106), it was concluded that deletion would be a multi step process. The first step in this would set a flag on the user that is being deleted, effectively setting the user as
deactivated
. This would prevent users from being able to perform actions while their account is being deleted.Further, while checking if a user is logged in (username is present in the session), we should only return the user if the flag is not set (the flag for
deactivated
is false for the user). This is to handle the case where a user gets deleted from the database but is still logged in (i.e. their session has not expired).At minimum, the following needs to be done:
deactivated
flag to the user modelrequireUsername
andrequireUser
methods to check for the flag and not return the username if the user isdeactivated
The text was updated successfully, but these errors were encountered: