search

foodcoop-adam / foodsoft

DEPRECATED, being merged in upstream. Web-based software for foodcoops - as used in NL.
http://foodcoop-adam.github.io/
Other
10 stars 3 forks source link

[vkmk] Revalidate user every x minutes #168

Closed wvengen closed 3 years ago

wvengen commented 8 years ago

When a user is set inactive in Vokomokum's member system, or when a user is removed from a group, this needs to be picked up by Foodsoft. Currently, these checks are only done at login. So when there is a conflict, it would be helpful if those rules are enforced. Currently the user can keep his priviliges when keeping the session active.

Solution: store timestamp when user info was updated in the session (it's signed thus safe for this), and re-check every x minutes, checked on each request (before_filter in the ApplicationController). It needs to update the workgroups the member is in, as well as logout the user when he's inactive. And while we're at it, also update name and address.

wvengen commented 8 years ago

@tg-x would you like to take this one up?

wvengen commented 3 years ago

The focus of this fork has become getting relevant functionality upstream. If you need this feature, please open an issue with upstream foodsoft.