grassrootsgrocery / admin-portal

GNU Affero General Public License v3.0
10 stars 5 forks source link

Ask for confirmation password for triggering automations #52

Closed mattsahn closed 1 year ago

mattsahn commented 1 year ago

In the portal, there are some buttons for triggering mass texts via Make automations. These are done by calling specific Make webhooks to trigger Make scenarios. Since these result in significant actions, like texting tens of people, it's important that they not be triggered frivolously or by accident. As such, we should implement a technique in the UI for confirming "major" actions before executing them. There should be at least a pop-up and then, ideally, we have a special password (set as an environment variable), that needs to be entered to proceed and actually trigger the automation. Only Dan and specific event admins would have this password to ensure that only they can trigger major actions.

We should make it easy to associate this kind of validation step for any kind of button/action throughout the site that we deem to be "major".

image

Tagging @danthefridgeman

henrygreenhut commented 1 year ago

Updated assignment here https://grassroots-grocery.monday.com/boards/2826542086/views/103721956/pulses/4815300549