search

ORNL / DataFed

A Federated Scientific Data Management System
https://ornl.github.io/DataFed/
Other
18 stars 14 forks source link

System - Need mechanism to disable user account #607

Open dvstans opened 3 years ago

dvstans commented 3 years ago

Due to a recent attack on datafed, there is a need to disable - but not delete - a users account. This feature was in the implementation during early stages, but was removed for some reason. This does not require any UI at this point - just a disabled flag in the record that will prevent authorization for any actions.

dvstans commented 3 years ago

This is primarily a DB issue - a user can be blocked during log-on. The UI needs to display a message saying their account is disabled.