To make PfaKSys more secure verification for new users should be added.
Possible Solution
Add a new section for security to the system settings.
Add a RadioField for selecting the required user verification level.
There should be 3 levels to choose from:
None: All users are verified automatically. Admins get email notification (as long as these notifications are enabled).
User: Users have to click on a verification link they get send via email after the registration. Admins get email notification (as long as these notifications are enabled).
Admin: Admins need to verify new users inside the user management before they are able to log in. They get an email notification to let them know that a new user awaits verification (as long as these notifications are enabled).
Add a new checkbox (also needed for the third security level) inside the user editing page for admins to enable/disable a user's verification.
Check if a user is verified before letting them log in.
Later there could be a forth level to disable user based registrations all together and only rely on the "Create new user"-button implemented in #30.
Description
To make PfaKSys more secure verification for new users should be added.
Possible Solution
None: All users are verified automatically. Admins get email notification (as long as these notifications are enabled).User: Users have to click on a verification link they get send via email after the registration. Admins get email notification (as long as these notifications are enabled).Admin: Admins need to verify new users inside the user management before they are able to log in. They get an email notification to let them know that a new user awaits verification (as long as these notifications are enabled).Additional Context
Related To:
30