kobotoolbox / kpi

kpi is the (frontend) server for KoboToolbox. It includes an API for users to access data and manage their forms, question library, sharing settings, create reports, and export data.
https://www.kobotoolbox.org
GNU Affero General Public License v3.0
131 stars 177 forks source link

Add constance setting to enforce superuser authentication #4967

Closed RuthShryock closed 3 months ago

RuthShryock commented 3 months ago

Checklist

  1. [X] If you've added code that should be tested, add tests
  2. [ ] If you've changed APIs, update (or create!) the documentation
  3. [X] Ensure the tests pass
  4. [X] Make sure that your code lints and that you've followed our coding style
  5. [X] Write a title and, if necessary, a description of your work suitable for publishing in our release notes
  6. [ ] Mention any related issues in this repository (as #ISSUE) and in other repositories (as kobotoolbox/other#ISSUE)
  7. [ ] Open an issue in the docs if there are UI/UX changes

Description

This setting can be enabled to require MFA for superusers with a usable password, but is disabled as default.

Notes

SUPERUSER_AUTH_ENFOREMENT constance value is initially set to False so that server owners can customize superuser authentication requirements.

notion-workspace[bot] commented 3 months ago

Task 1 - server wide setting