Admidio / admidio

Admidio is a free open source user management system for websites of organizations and groups. The system has a flexible role model so that it’s possible to reflect the structure and permissions of your organization.
https://www.admidio.org
GNU General Public License v2.0
296 stars 121 forks source link

Add option to jail non-logged-in Users to login-page only #1643

Open LokeYourC3PH opened 2 weeks ago

LokeYourC3PH commented 2 weeks ago

Is your feature request related to a problem? Please describe. Not directly.

Describe the solution you'd like I would like there to be a toggle, in the General or Security section, which allows non-logged-in Users to only access the login page and none other, especially not the Overview page as it could result in a data leak.

Describe alternatives you've considered

Additional context PS: I am aware of the "Module Access" feature for each module, but I think having a Universal/Unified toggle might make it more streamlined for those who just simply need everything disabled, even the Overview page itself. This stems from the fact that, the Calendar, Birthdays, and plenty other features (even with all "Module Access" settings set to "Logged-in Users only") are still available on the Overview page to non-logged-in Users as well.