makaleks / drec_stud_site

A web-site on Django (Python3), with VK auth., Yandex payment
https://frtk.mipt.ru
1 stars 3 forks source link

Todo: password change #22

Open makaleks opened 6 years ago

makaleks commented 6 years ago

Currently, offline passwords (if Vk is disabled) can be set by ssh only. This must be changed to web-view, that is turned on from settings.py. The User Story:

  1. Situation: MIPT is offline. 2.1. Site reliable admin (superuser) sets some variable (Password Variable, or PVar) to True. 2.2. The True on PVar makes possible for all superusers to search other users (enables a special page, or SPage).
  2. Superuser comes at some place with his notebook. LOOP_START:
  3. Other users come, provide student document.
  4. Superuser searches the student in database, opens SPage, gives a piece of paper to a student.
  5. The student clicks 'generate password'.
  6. A strong password is generated, its hash is saved in database and only then shown to the student.
  7. The student writes down his new passport. GOTO LOOP_START