cisagov / crossfeed

External monitoring for organization assets
https://docs.crossfeed.cyber.dhs.gov
Creative Commons Zero v1.0 Universal
364 stars 54 forks source link

Add Database trigger to remove user from database #2512

Open cduhn17 opened 7 months ago

cduhn17 commented 7 months ago

💡 Summary

What is the work, as a high-level summary?

There are inactive users who remain in the database, and we are managing user authentications based on the lastLoggedIn timestamp. We aim to implement a database trigger to remove users from the database if their account creation date exceeds 90 days without any login activity.

Why does this work belong in this project?

This initiative aligns with our strategy of enforcing user restrictions based on login activity, as outlined in issue #2458.

Implementation Notes

Develop a database trigger that compares today's date against the user's creation date. If the duration since the creation date has exceeded 90 days without login activity, the user should be removed from the database.

Acceptance Criteria

How do we know when this work is done?